[jboss-dev-forums] [Design of Security on JBoss] - Re: GSSAPI/Negotiate

noFreak do-not-reply at jboss.com
Tue May 20 16:23:30 EDT 2008


Hi,
we have similar implementation requirements for a fat client szenario.
1. The client part should get the TGT from cache
2. TGT should be send to JBoss
3. JBoss should get a Service Ticket from the AS Server with the aid of GSS-API
4. Service execution is secured

the first i have get working with the Krb5LoginModule, the second i should get work, but currently id dont know how i could get the third to work.
generelly i dont know whether its possible.
Is there a example how i can obtain the service Ticket from the AS Server with the aid from GSS-API?
@carstenKlein
can you give an example how it works?
it would be very helpfull


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4152132#4152132

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4152132



More information about the jboss-dev-forums mailing list