[18916] in Kerberos_V5_Development
Re: SSO Application needs username from GSSName (or GSSAPI)
daemon@ATHENA.MIT.EDU (Simo Sorce)
Fri Aug 1 13:48:05 2014
Message-ID: <1406915272.19681.16.camel@willson.usersys.redhat.com>
From: Simo Sorce <simo@redhat.com>
To: amit <amitsggs@gmail.com>
Date: Fri, 01 Aug 2014 13:47:52 -0400
In-Reply-To: <1406876571641-41081.post@n3.nabble.com>
Mime-Version: 1.0
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Fri, 2014-08-01 at 00:02 -0700, amit wrote:
> Hi,
>
> I am trying to use kerberos authentication using GSS-API in java.
> We have following two methods to getGSSName once we get the TGT form KDC.
>
> 1. GSSCredential cred =
> manager.createCredential(GSSCredential.INITIATE_ONLY);
> 2. GSSName gssName = cred.getName();
>
> The format of GSSName is <USERNAME>@<REALM_NAME>
>
> As my application is using SSO, it does not have username and need to get it
> from above mentioned GSSName.
> We can have username including '@' character so simple cropping of string on
> the basis of first existence of '@' character won't work as username can
> have '@'.
>
> So, the other way remains is to crop GSSName with the last existence of '@'
> character in a string (if realm_name can not have '@' char).
>
> Could anyone please help me in clarifying if we can have '@' character in
> realm_name or not?
> If realm_name can have '@' character, is there any other way to get USERNAME
> from some GSSAPI?
Does your implementation support gss_localname() ?
Simo.
--
Simo Sorce * Red Hat, Inc * New York
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
