We're in the process of testing out SPNEGO support for an Apigee API proxy. I'm using the API sample found here as the basis for my proxy. Everything is configured, and now it's time to test. I'm running:
curl -vki --negotiate -u : https://<my Apigee endpoint>/<my proxy>
In doing so, however, I see that my
Authorization header is sending an NTLM negotiation, rather than a Kerberos negotiation. This is problematic, as the code for the proxy is configured to use GSSAPI to provide Kerberos support.
Does anyone know of a way to force curl to use Kerberos rather than NTLM as the negotiation? I haven't been able to track down any way of doing it thus far, but figured I'd ask here.
EDIT: Here is the output showing my version of curl...
$ curl -V curl 7.47.1 (x86_64-w64-mingw32) libcurl/7.47.1 OpenSSL/1.0.2g zlib/1.2.8 libidn/1.32 libssh2/1.7.0 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
Features: IDN IPv6 Largefile SSPI Kerberos SPNEGO NTLM SSL libz TLS-SRP