Kerberos over HTTP

Hi!

Thanks for your answer. I used the example to get a webpage protected with single sign-on (MS Outlook web access) and it works.

Now I'm trying to access to an Apache server protected with Kerberos / Negotiate.

My problem is that it seems to use my Windows XP ticket even if I put a "Authenticator.setDefault(new MyAuthenticator());" line and that MyAuthenticator returns the right username/password for the Apache server. I tried also to use Authenticator.requestPasswordAuthentication()... but then I don't know what to do with the PasswordAuthentification object returned.

My login.conf looks like :

com.sun.security.jgss.krb5.initiate {

com.sun.security.auth.module.Krb5LoginModule required

useTicketCache=false

doNotPrompt=false

principal="MY_REALM"

debug=true;

};

How can I force Java to get the username/password from authenticator ?

Any other idea about my problem ?

Thanks,

Laurent

Laurent_Grangiera at 2007-7-9 5:07:05 >

You are right. The apache realm is different.

But I forgot to mention that I also put a krb5.conf file for Java :

[libdefaults]

default_realm = MY_REALM

dns_lookup_realm = false

dns_lookup_kdc = false

[domain_realm]

the-apache-server = MY_REALM

[realms]

MY_REALM = {

admin_server = the-apache-server

kdc = the-apache-server

}

Maybe something is wrong here ?

Note that my apache-server is also the Kerberos server (admin + kdc).

I also tried to set properties :

java -Djava.security.krb5.realm=MY_REALM -Djava.security.krb5.kdc=the-apache-server....

Nothing is working. Java is always using my Windows principal.

Is it possible that Java use a cache and that I should force it to reload or something like that ?

Laurent_Grangiera at 2007-7-9 5:07:05 >