[jboss-jira] [JBoss JIRA] (SECURITY-723) SPNEGO backport of additional Kerberos ticket decoding

Tom Fonteyne (JIRA) jira-events at lists.jboss.org
Thu Jan 31 07:12:53 EST 2013


     [ https://issues.jboss.org/browse/SECURITY-723?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tom Fonteyne updated SECURITY-723:
----------------------------------

    Steps to Reproduce: 
- Use either a combination of Windows 2003 Active Directory and a Windows XP client, or Windows 2008 and a Vista/Windows7 client
- setup JBoss EAP 5.2.0 with SPNEGO pointed to the AD server.
  - "host" security domain
  - "SPNEGO" security domain
  - a simple properties based setup for spnego roles, with (for example)
     tom at JBOSSUK.REDHAT.COM=Users
- test with the SPNEGO toolkit that all 3 tests are working ok.

MORE TO COME

  was:TO BE ADDED SOON


    
> SPNEGO backport of additional Kerberos ticket decoding
> ------------------------------------------------------
>
>                 Key: SECURITY-723
>                 URL: https://issues.jboss.org/browse/SECURITY-723
>             Project: PicketBox 
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>    Affects Versions: Negotiation_2_1_3
>            Reporter: Tom Fonteyne
>            Assignee: Tom Fonteyne
>
> /jboss-negotiation-spnego/src/main/java/org/jboss/security/negotiation/spnego/encoding/TokenParser.java
> is lacking additional decoding of the Kerberos ticket.
> This patch backports the missing code from trunk
> Testing: the standard unit test for remote EJB calls over SPNEGO.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list