[22424] in Kerberos
JAAS Kerberos login module
daemon@ATHENA.MIT.EDU (Ying Zhao)
Fri Sep 10 15:15:08 2004
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Date: Fri, 10 Sep 2004 15:14:08 -0400
Message-ID: <00CFF6F48BD70F48AAB482CAEB1AC4190CE546@usnyny1exch01.office.jstor.org>
From: "Ying Zhao" <Ying.Zhao@ithaka.org>
To: <kerberos@mit.edu>, <jaltman@mit.edu>
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
Java JAAS module is not necessarily used to obtain local credentials,
right? I tried a program using a different KDC on another realm and it
still works, the only thing I needed to do is just to specify the KDC
and realm of the destination.
Thx,
- Ying
-----Original Message-----
From: Jeffrey Altman [mailto:jaltman@mit.edu]
Sent: Friday, September 10, 2004 3:02 PM
To: Ying Zhao
Cc: Derrick Schommer; krbdev@mit.edu
Subject: Re: interoperability of Kerberos client and server
The appropriate place for this discussion is kerberos@mit.edu or the
comp.protocols.kerberos
newsgroup. The krbdev@mit.edu mailing list is meant to be used for
discussion on the
development of the MIT Kerberos implementation.
I am redirecting replies to kerberos@mit.edu
As a hint: Java JAAS modules do not perform network authentication.
They are used to obtain
local credentials which may or may not be used in the future input to
the network authentication
protocol such as GSS-API. Java provides its own implementation of
GSS-API Kerberos 5 for use
in communicating with other GSS-API Kerberos 5 compatible clients and
servers.
Jeffrey Altman
Ying Zhao wrote:
>Thanks, Derrick!
>
>However, as far as my understanding about GSS-API, it is more like a
>peer-to-peer implementation. If I want to stick to (or at most
customize
>with)
>"com.sun.security.auth.module.Krb5LoginModule" - a JAAS plug-in module,
>is this going to be a potential problem? From the source code, it is a
>NT implementation and I am working on tuning it for UNIX one.
>
>Thanks,
>- Ying
>
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
