Spring-security-kerberos cross domain with trust

Question

Is anyone aware if it's possible to provide cross-domain authentication with spring-security-kerberos assuming a trust is set up between the domains? I'm running a standard Java web application using spring-security and spring-security-kerberos on a Windows 2008 R2 server under Tomcat 7.

EDIT:

Running Java 1.6.0_30

My current krb5.ini

[libdefaults]
    default_realm = MY.DOMAIN
    dns_lookup_kdc = true
    dns_lookup_realm = true
[realms]
MY.DOMAIN = {
    default_domain = MY.DOMAIN
    kdc = MY.DOMAIN
}

score 0 · Answer 1 · answered Nov 26 '12 at 21:56

0

This is by default available in JGSS if you configure your krb5.ini correctly.

answered Nov 26 '12 at 21:56

Michael-O

18,123
6
55
121

You wouldn't happen to have a link to some documentation on that? – pap Nov 27 '12 at 07:26
Share your `krb5.ini`. What is your Java version? – Michael-O Nov 27 '12 at 08:43
added Krb5.ini to question. – pap Nov 29 '12 at 14:30
Where is the cross-domain? You have only one domain in your conf. – Michael-O Nov 29 '12 at 14:41
Yes, that is my question. How would I configure this? – pap Nov 30 '12 at 07:25
You need you put every participating realm in the `[realms]` and `[domain_realm]´ section. – Michael-O Nov 30 '12 at 10:51

Spring-security-kerberos cross domain with trust

1 Answers1