Sunday, 15 July 2012

http - java HttpServer unable to authenticate using kerberos -


I am running a Java server process that creates an HTTP server () object.

The following arguments

  -Dusun.security.krb5.debug = true -Djava.security.krb5.conf = "C: \ Windows \ krb5.ini" -Djava .security.auth.login. Config = "D: \ jaas.conf" -Djavax.security.auth.useSubjectCredsOnly = false -Dhttp.auth.preference = "Kerberos"  

The jaas.conf content is as follows.

  com.sun.security.jgss.krb5.accept {com.sun.security.auth.module.Krb5LoginModule Essential UsesTitk Cache = True Shopkey = True Keytab = "D: \ mykey.keytab" DoNotPrompt = true use kitab = true debug = true principal = "full_sufide_span"; };  

But the http server is not asking the client to use Kerobors, but GET requests only provide services without any authentication.

I hope that http.auth is specified for the Kerberos transmission plan and to specify all the necessary config files, this client should ask to authenticate.

I also do not see any additional logs after enabling Desun.security.krb5.debug = true

What is the HTTP server? Your server requires some SPNEGO authentication as configured otherwise it will not be prompt at all.


No comments:

Post a Comment