Apologies for cross posting... I have a CGI running on IIS 6 that I would like to access resources on other IIS 6 machines using delegated Kerberos authentication. Delegation is already working using ASP as per "http://support.microsoft.com/kb/314404". The CGI already supports "normal" Kerberos authentication using SSPI (i.e. with a fixed user ID and password), and I guess that delegated authentication goes through a similar "conversation" with the server? If so, what credentials do I use in AcquireCredentialsHandle and how do impersonate the client user ID? The CGI is getting an HTTP_AUTHORIZATION variable from IIS with the protocol (Negotiate) and a key. Do I use this key to impersonate the client user ID, and if so then how? Thanks in advance for any help...
