[jcifs] Kerberos based SSO

[Richard Caper]

Java provides the core Kerberos stuff... there is some "glue" that the
filter needs to wrap it for the client.  This is in jcifs-ext and also
the patch here (which has instructions also needed for jcifs-ext):

http://lists.samba.org/archive/jcifs/2004-June/003497.html

I have never gotten this working myself frankly, but others on the
list have reported some success.

On 6/19/06, Mike Streeton <mike.streeton at ardentia.co.uk> wrote:
> Look at:
>
> http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/tutorials/index.
> html
>
> It is already built into java
>
> Mike
>
> www.ardentia.com the home of NetSearch
> -----Original Message-----
> From: jcifs-bounces+mike.streeton=ardentia.co.uk at lists.samba.org
> [mailto:jcifs-bounces+mike.streeton=ardentia.co.uk at lists.samba.org] On
> Behalf Of Michael B Allen
> Sent: 16 June 2006 22:42
> To: S Wagle
> Cc: jcifs at lists.samba.org
> Subject: Re: [jcifs] Kerberos based SSO
>
> Look at jcifs-ext on sourceforge. For some reason I can't recall clearly
> but I think it may have implemented kerberos support in some form.
>
> On Fri, 16 Jun 2006 13:28:37 -0400
> S Wagle <wagle at earthlink.net> wrote:
>
> > I'm looking some feedback on implementing Kerberos based SSO.
> >
> > We successfully implemented NTLM based SSO in our J2EE web apps
> running
> > on various application servers using JCIFS.  We have Active Directory
> in
> > a Windows 2003 server environment.  The users log in to Windows XP
> work
> > stations to access the web apps.  JCIFS worked very well for us!
> >
> > Now, I am trying to explore ways to do Kerberos authentication.  Would
>
> > greatly appreciate any tips.
> >
> > Thanks
> >
>
>
> --
> Michael B Allen
> PHP Extension for SSO w/ Windows Group Authorization
> http://www.ioplex.com/
>