Stack Overflow
Stack Overflow

Questions tagged [jgss]

29 questions
1
vote
1 answer

reliable and platform-independent way of getting logged-in user in java

We need a java application to run on both solaris and windows machines and they are kerberized. We use JGSS to get the Princiapl corresponding to the logged-in user in Solaris, by specifying the loction of credential cache that is stored in…
Vikdor
  • 23,934
  • 10
  • 61
  • 84
1
vote
0 answers

MIT Kerberos tool makes JAAS able to access the Windows LSA? How to do it without the tool

Running a Java app using JAAS i got a surprising effect: The Java client-application wasn't able to access windows LSA, until i installed the MIT Kerberos tool 'kfw-4.0.1-i386.msi' ? The JAAS conf file settings: WEBSTART_CLIENT_CONTEXT { …
Houtman
  • 2,819
  • 2
  • 24
  • 34
1
vote
1 answer

Java GSS/JDBC Issue

I have a bit of an unusual issue I'm trying to solve. I develop on a Mac. I'm writing some code that connects to a database using jdbc. I don't have direct access to the db server - to get to it, I have to set up port forwarding on ssh, which goes…
Alex
  • 133
  • 1
  • 12
1
vote
0 answers

JGSS GSSName.NT_HOSTBASED_SERVICE not working for kerberos service keytab

I am testing the JGSS sample on my local domain but have a problem with hostbased service. Below is the setup: obtain a keytab generated from command ktpass -princ myservice/host.my.example.com@MY.EXAMPLE.COM -mapuser krbsrv@my.example.com -crypto…
zjyuan
  • 21
  • 1
  • 3
1
vote
2 answers

Java-6 to Java-7 Kerberos - breaking behaviour change sessionKey now AP-REQ.Authenticator.subkey

I'm working on a project where we use JAAS/Krb5LoginModule with useTicketCache & doNotPrompt as well as the allowtgtsessionkey registry change to piggy back our authentication on the windows logon of the domain joined computer. We then use…
Kaveh Goudarzi
  • 13
  • 4
1
vote
0 answers

How to get a Kerberos credential via Java Gss-api on win7

I want to write a simple program that implements security communication between client and server by calling gss-api. I try like this: mgr = GSSManager.getInstance(); krb5Mechanism = new Oid("1.2.840.113554.1.2.2"); …
juaney2012
  • 11
  • 3
0
votes
0 answers

JAAS/JGSS misunderstanding

Here is a simple class supposed to do JAAS+JGSS authentication. It fails at the step "createCredential" : GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt) Has anyone a clue about the cause of this…
Pascal Jakobi
  • 11
  • 5
0
votes
1 answer

do I use Krb5LoginModule or LdapLoginModule

Sorry if this is a silly question. Do I use LdapLoginModule when I want to check if user exist or authorized? Do I use Krb5LoginMoudle when I want to check if user has a ticket to do work? Regards, JemRug
jemrug
  • 89
  • 10
0
votes
1 answer

Use of spnego and kerberos with gss in graal

I'm attempting to reuse some existing code which enables spnego authentication in a new Quarkus app. The Quarkus app when compiled as a standard JAR and run with OpenJDK 11 works perfectly. As soon as a I package it up as a native executable (on…
Martin Cassidy
  • 686
  • 1
  • 9
  • 28
0
votes
1 answer

How to deal with Missing APIs from common jdk. (org.ietf.jgss required)

My library has dependency on org.ietf.jgss package which is not included in the android.jar. I added jndi.jar for javax.naming package(also missed in the android) but couldn't find the jar for the org.ietf.jgss. I repackaged the jar from…
tompal18
  • 1,164
  • 2
  • 21
  • 39
0
votes
1 answer

KrbException error during token exchange

I'm testing default oracle example client and server code: http://pastebin.com/FjGMGwmN and got this strange error on linux (in Windows it's another error, i will open another question): KrbException: Invalid argument (400) - Cannot find key of…
kain64b
  • 2,258
  • 2
  • 15
  • 27
0
votes
0 answers

java.security.PrivilegedActionException on Configuring SSO using SPNEGO Tomcat 7

I am trying to get SSO working using SPNEGO for Tomcat 7 with IBM JDK. We are using "org.apache.catalina.authenticator.SpnegoAuthenticator" for authentication which calls com.sun.security.jgss.krb5.accept. The configuration for it is…
Rachit
  • 1
  • 2
0
votes
1 answer

Using multiple keytabs in Kerberos JGSS without using JAAS .conf file

I want to use multiple keytabs in multiple server threads. I don't want to use JAAS conf file so i implemented my own login configuration in LoginConfiguration class. The getGSSCredentials() function in KerberosLogin class is used to get the…
Cerberuz
  • 155
  • 2
  • 15
-1
votes
1 answer

Kerberos cached ticket on windows machine not regenerated after user unlock

I have a java server and client applications. These applications are working on windows machines. Client login on server using kerberos authentication. It's implemented using jgssapi. At first the client retrieve stored cached tgt ticket from the…
wazz
  • 760
  • 2
  • 8
  • 19
1
2