[25052] in Kerberos
Re: Java GSS/Kerberos issue - Autheticating server
daemon@ATHENA.MIT.EDU (Seema Malkani)
Fri Dec 2 14:56:02 2005
Date: Fri, 02 Dec 2005 11:54:26 -0800
From: Seema Malkani <Seema.Malkani@Sun.COM>
In-reply-to: <320a0b5e0512011457s24580f40tc7abe1fd7b691aff@mail.gmail.com>
To: Laurence Brockman <daceilo@gmail.com>
Message-id: <4390A672.7020207@sun.com>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii; format=flowed
Content-transfer-encoding: 7BIT
cc: kerberos@mit.edu
cc: "Douglas E. Engert" <deengert@anl.gov>
Errors-To: kerberos-bounces@mit.edu
Laurence Brockman wrote:
>
>[root@localhost laurence]# more /tmp/jaas.conf
>/** Login Configuration
> **/
>JaasServer {
> com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true
>storeKey=true keyTab="/etc/krb5.keytab";
>};
>
>*Code from GSSAuthorizor:*
>
> GSSManager manager = GSSManager.getInstance();
> Oid kerberos = new Oid("1.2.840.113554.1.2.2");
> this.serverName = "another@admin";
> GSSName serverGSSName = manager.createName(this.serverName,
>GSSName.NT_USER_NAME);
> GSSCredential serverGSSCreds = manager.createCredential(serverGSSName,
>GSSCredential.INDEFINITE_LIFETIME,
> kerberos, GSSCredential.ACCEPT_ONLY);
> log.debug("Created credentials for the service");
>
>
>
>
You can create GSSName as follows:
GSSManager manager = GSSManager.getInstance();
Oid krb5PrincipalNameType = new Oid("1.2.840.113554.1.2.2.1");
// Identify the name of the server. This uses a Kerberos specific
// name format.
GSSName serverName = manager.createName("nfs/foo.sun.com",
krb5PrincipalNameType);
If you still have problems, send me a Kerberos debug output using
"-Dsun.security.krb5.debug=true".
Seema
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
