active directory - Whether to use an SPN with a Kerberos loginmodule in JAAS -


i building kerberos login module jaas used jconsole.

jconsole client used access process exposed mbeans, kerberos loginmodule authenticate user.

the user log in via jconsole, , jconsole pass user data loginmodule, username , password handled kerberos loginmodule , users credentials validated against central active directory.

i having problems configuration of kerberos. namely. require set of spn? or require single keytab set up?

if asking user username , password on console need neither keytab nor spn. need plugin jaas ask password. kerberos session initiated jaas login module , have tgt inside of app.

on other hand if planning accept existing kerberos session user ( current windows domain session ) need have spn in active directory, , user not prompted password application.

the keytab copy of key stored in kerberos database, need spn generate keytab. converse not true can obtain session key active directory providing spn password.


Comments

Popular posts from this blog

python - No exponential form of the z-axis in matplotlib-3D-plots -

php - Best Light server (Linux + Web server + Database) for Raspberry Pi -

c# - "Newtonsoft.Json.JsonSerializationException unable to find constructor to use for types" error when deserializing class -