[18915] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

SSO Application needs username from GSSName (or GSSAPI)

daemon@ATHENA.MIT.EDU (amit)
Fri Aug 1 13:30:08 2014

Date: Fri, 1 Aug 2014 00:02:51 -0700 (PDT)
From: amit <amitsggs@gmail.com>
To: krbdev@mit.edu
Message-ID: <1406876571641-41081.post@n3.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Hi,

I am trying to use kerberos authentication using GSS-API in java.
We have following two methods to getGSSName once we get the TGT form KDC.

1. GSSCredential cred =
manager.createCredential(GSSCredential.INITIATE_ONLY);
2. GSSName gssName = cred.getName();

The format of GSSName is <USERNAME>@<REALM_NAME>

As my application is using SSO, it does not have username and need to get it
from above mentioned GSSName.
We can have username including '@' character so simple cropping of string on
the basis of first existence of '@' character won't work as username can
have '@'.

So, the other way remains is to crop GSSName with the last existence of '@'
character in a string (if realm_name can not have '@' char).

Could anyone please help me in clarifying if we can have '@' character in
realm_name or not?
If realm_name can have '@' character, is there any other way to get USERNAME
from some GSSAPI?

Thank you,
Amit K



--
View this message in context: http://kerberos.996246.n3.nabble.com/SSO-Application-needs-username-from-GSSName-or-GSSAPI-tp41081.html
Sent from the Kerberos - Dev mailing list archive at Nabble.com.
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post