[25060] in Kerberos
Re: Java GSS/Kerberos issue - Autheticating server
daemon@ATHENA.MIT.EDU (Laurence Brockman)
Mon Dec 5 17:21:55 2005
Message-ID: <320a0b5e0512051023x4ec34924xd776ef3499a4fbd7@mail.gmail.com>
Date: Mon, 5 Dec 2005 11:23:52 -0700
From: Laurence Brockman <daceilo@gmail.com>
To: Seema Malkani <Seema.Malkani@sun.com>
In-Reply-To: <4390A672.7020207@sun.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: inline
cc: kerberos@mit.edu
cc: "Douglas E. Engert" <deengert@anl.gov>
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Thanks guys for all your help. I've now handed the project off to another
group to look at... I could get the client to autheticate using either the
JAAS methodology or use straight GSS with the keytab file, but I could not
get the server portion to work either way.
Thanks again so much!
On 12/2/05, Seema Malkani <Seema.Malkani@sun.com> wrote:
>
> Laurence Brockman wrote:
>
> >
> >[root@localhost laurence]# more /tmp/jaas.conf
> >/** Login Configuration
> > **/
> >JaasServer {
> > com.sun.security.auth.module.Krb5LoginModule required
> useKeyTab=true
> >storeKey=true keyTab="/etc/krb5.keytab";
> >};
> >
> >*Code from GSSAuthorizor:*
> >
> > GSSManager manager = GSSManager.getInstance();
> > Oid kerberos = new Oid("1.2.840.113554.1.2.2");
> > this.serverName = "another@admin";
> > GSSName serverGSSName = manager.createName(this.serverName,
> >GSSName.NT_USER_NAME);
> > GSSCredential serverGSSCreds = manager.createCredential(serverGSSName,
> >GSSCredential.INDEFINITE_LIFETIME,
> > kerberos, GSSCredential.ACCEPT_ONLY);
> > log.debug("Created credentials for the service");
> >
> >
> >
> >
> You can create GSSName as follows:
>
> GSSManager manager = GSSManager.getInstance();
>
> Oid krb5PrincipalNameType = new Oid("1.2.840.113554.1.2.2.1");
>
> // Identify the name of the server. This uses a Kerberos specific
> // name format.
> GSSName serverName = manager.createName("nfs/foo.sun.com",
> krb5PrincipalNameType);
>
>
> If you still have problems, send me a Kerberos debug output using
> "-Dsun.security.krb5.debug=true".
>
> Seema
>
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
