[30156] in Kerberos
Java Client accessing .NET Web Service and Kerberos Delegation with AD
daemon@ATHENA.MIT.EDU (Loki)
Mon Jul 28 18:38:00 2008
From: Loki <Loki@no.spam>
Date: Tue, 29 Jul 2008 00:07:49 +0200
Message-ID: <g6lg1f$m81$1@newsreader2.netcologne.de>
Mime-Version: 1.0
X-Complaints-To: abuse@netcologne.de
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi all,
we are running a .NET web service which uses Kerberos delegation to
access a backend service on behalf of the client's security context.
We have no problem with .NET client applications or IE accessing the web
service, but in case of a Java app acting as client, delegation fails.
The Java app correctly requests a TGT from the Win 2003 Active Directory
and then requests and gets a valid service ticket to access the .NET web
service. After that, the web service does a programmatically
impersonation before making a ADSI/LDAP bind to the AD. This
impersonation fails in case of a Java application.
Client:
- Java 6 application on Windows
Web Service:
- IIS 6
- ASP.NET 2.0 Web Service
Backend Service:
- Windows Server 2003 Active Directory Domain Controller (LDAP)
Did anyone implemented a similar environment and may help me to find a
solution? I can post configuration files, log files and network traces.
loki
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
