Hi, 

I have a question about the Windows SSP. Does an SSP application need to have a hook into SspiPromptForCredentials (or is there anything in the SSP that SspiPromptForCredentials calls into) that tells the API function to display a username and password box?

The reason I ask is because the PuTTY folks have asked me to investigate why there's no prompt, just a weird banner dialog (with only a 'Cancel' button enabled on it), when I call into SspiPromptForCredentials when there are no credentials in the Credential Manager for the host I'm connecting to. 

When I use SspiPromptForCredentials with the 'Negotiate' mechanism, I get a prompt, but I don't think the credentials ever make it to the other side (i.e. the server), and that the SSP then has a moment and says 'I don't deal with this, go away'.

You can test this with PuTTY from here:

https://github.com/spaetow/putty/tree/moonshot-gssapi (when building in Windows, run 'perl mkfiles.pl' from the root of that tree first to generate the Visual Studio solution and VC project files).

To see what happens, change line 288 in https://github.com/spaetow/putty/blob/moonshot-gssapi/windows/wingss.c from "gss_mech_names[mech_index]" to "Negotiate" and you get a prompt to enter credentials. If you leave it as is, you get a weird banner saying "Connecting to hostname-you're-connecting-to" with just the cancel button enabled.

Kevin, Sam, Mark, Luke... any ideas? I could pick apart the credential after I get it in the 'authid' structure and then create a new one that fits, but that would probably be specific to ABFAB which I don't want... :-/

Thoughts?

Stefan Paetow
Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: [log in to unmask]
skype: stefan.paetow.janet

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.