Bug 138414

Summary:	Add Kerberos credentials delegation to Konqueror
Product:	[Applications] konqueror	Reporter:	Hai Zaar <haizaar>
Component:	general	Assignee:	Konqueror Developers <konq-bugs>
Status:	RESOLVED FIXED
Severity:	wishlist
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Compiled Sources
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description Hai Zaar 2006-12-05 22:11:58 UTC

Version:            (using KDE KDE 3.5.5)
Installed from:    Compiled From Sources
OS:                Linux

I'd like to have Kerberos credentials delegation feature in Konqueror.

Quoting from this http://www.grolmsnet.de/kerbtut/credentialsdelegation.html

Konqueror does support GSSAPI, but not credentials delegation out of the box. So the ugly way to fix it is:
   1. get the kdelibs-x-y-z source package.
   2. edit file
      kioslave/http/http.cc
   3. change
      OM_uint32 req_flags = 0;
      to
      OM_uint32 req_flags = GSS_C_DELEG_FLAG ;
Warning:this changes Konqueror to do always credentials delegation.
A configurable behavior (for example based on target-hostname, like Firefox does) will be a lot better. Maybe someone adds a configuration dialog to Konqueror?

Comment 1 Richard Fuller 2007-11-20 11:43:59 UTC

*** This bug has been confirmed by popular vote. ***

Comment 2 maxim 2008-07-25 08:46:18 UTC

Is same as (or at least very similar to) http://bugs.kde.org/show_bug.cgi?id=150954

Comment 3 Dawit Alemayehu 2010-04-25 18:29:57 UTC

SVN commit 1118669 by adawit:

- Added support for passing configuration info to the authentication object.

- Added a configuration option for enabling credentials delegation for GSSAPI (Negotiate)
  authentication. To activate this featurei globally, simply add 

  "DelegateCredentialsOn=true" 

  to the global section of either $KDEHOME/share/config/kio_httprc or $KDEHOME/share/config/kioslaverc 
  files. To activate it per host/domain, first create a config group in either one of the two files 
  mentioned and then add the option. For example,

  [foo.bar]
  "DelegateCredentialsOn=true"

  That way the flag can be enabled only as needed.

BUG: 138414


 M  +1 -1      http.cpp  
 M  +11 -6     httpauthentication.cpp  
 M  +14 -10    httpauthentication.h  


WebSVN link: http://websvn.kde.org/?view=rev&revision=1118669