[30885] in Kerberos
Re: Java app as Windows Service w/JGSS+Kerberos - should it work?
daemon@ATHENA.MIT.EDU (Chris)
Wed Mar 18 22:30:00 2009
From: Chris <chriscorbell@gmail.com>
Date: Wed, 18 Mar 2009 15:49:49 -0700 (PDT)
Message-ID: <d806884c-b42e-4629-8b8e-14e015615db0@c9g2000yqm.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
On Mar 11, 5:08 pm, Chris <chriscorb...@gmail.com> wrote:
> I know this is a fairly specific configuration but I'm hoping someone
> may have some experience to offer - have you been able to get a GSS-
> API-enabled Java server application running as a Windows Service with
> a local KeyTab file? If you have gotten this to work, did you ever see
> the above symptom & is there a likely cause? Or if not, could it be
> that this simply won't work - is there something about the Java GSS-
> API implementation that conflicts with running in a wrapping service
> process?
>
> TIA,
> Chris
To reply to the list for the record - I got it working by writing my
own service wrapper which does not launch the JBoss JVM as a child
process but simply invokes the JBoss run and shutdown scripts (from
OnStart() and OnStop() respectively) as their own processes, using
Process::Start() (C++/CLI).
Kerberos authentication now works for me with a local keyTab through
the Java GSS-API libraries in JBoss. The service runs as Local
System. There was something incompatible in the way that the Tanuki
service wrapper launches JBoss.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
