[8045] in Kerberos
Kerberos in Java
daemon@ATHENA.MIT.EDU (Doug Engert)
Thu Sep 19 11:57:52 1996
Date: Thu, 19 Sep 1996 10:50:11 -0500
From: Doug Engert <DEEngert@anl.gov>
To: jaynes@umich.edu
Cc: kerberos@MIT.EDU
In-Reply-To: <32412CF0.5419@umich.edu>
William Jaynes writes:
> Has anyone developed a Java class to do Kerberos authentication? I'm
> developing server-side Java web applications and I could use something
> pretty simplistic, that takes an id and passwd and simply returns
> whether the password is good.
Why, as a user, would I trust a Java application with my Kerberos
userid and password? I might trust yours, but if users get in the
habit of giving their password to java applications, someone else
might WILL along and write one which looks like yours, i.e. a Trojan
horse. You really don't ever want to send you kerberos password over
the net.
> --
> William Jaynes |MCIT, University of Michigan Medical Center
> jaynes@umich.edu|Arbor Lakes Building, 4251 Plymouth Rd.
> 313-763-9039 |Ann Arbor, MI 48105-2785
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444 <New Area Code 8/3/96>
PGP Key fingerprint = 20 2B 0C 78 43 8A 9C A6 29 F7 A3 6D 5E 30 A6 7F
