Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Last revisionBoth sides next revision
72:configure_jaas_jgss [2019/11/15 13:05] – [Configure JAAS and JGSS Support on the Stages Server] etea72:configure_jaas_jgss [2020/03/04 11:40] – [Configure JAAS and JGSS Support on the Stages Server] twn
Line 17: Line 17:
     principal="HTTP/<fqnd>@<KERBEROS-REALM>";     principal="HTTP/<fqnd>@<KERBEROS-REALM>";
 }; };
 +
 </code> </code>
  
Line 24: Line 25:
 |<fqdn>|The full quantified DNS domain name of the Stages Server.| |<fqdn>|The full quantified DNS domain name of the Stages Server.|
  
-Example:+Example:<code>
  
-<code> 
 de.methodpark.pkit.auth.SpnegoAuthenticator { de.methodpark.pkit.auth.SpnegoAuthenticator {
  com.sun.security.auth.module.Krb5LoginModule required  com.sun.security.auth.module.Krb5LoginModule required
Line 36: Line 36:
  principal="HTTP/pkit.methodpark.de@PKITBUILD.ER.METHODPARK.DE";  principal="HTTP/pkit.methodpark.de@PKITBUILD.ER.METHODPARK.DE";
 }; };
 +
 </code> </code>
  
Line 55: Line 56:
 .<ad-dns-domain> = PKITBUILD.ER.METHODPARK.DE .<ad-dns-domain> = PKITBUILD.ER.METHODPARK.DE
 <ad-dns-domain> = PKITBUILD.ER.METHODPARK.DE <ad-dns-domain> = PKITBUILD.ER.METHODPARK.DE
 +
 </code> </code>
  
Line 62: Line 64:
 |<ad-dns-domain>|The DNS domain which belongs to the Active Directory.| |<ad-dns-domain>|The DNS domain which belongs to the Active Directory.|
  
-Example:+Example:<code>
  
-<code> 
 [libdefaults] [libdefaults]
 default_realm = PKITBUILD.ER.METHODPARK.DE default_realm = PKITBUILD.ER.METHODPARK.DE
Line 77: Line 78:
 .pkitbuild.er.methodpark.de = PKITBUILD.ER.METHODPARK.DE .pkitbuild.er.methodpark.de = PKITBUILD.ER.METHODPARK.DE
 pkitbuild.er.methodpark.de = PKITBUILD.ER.METHODPARK.DE pkitbuild.er.methodpark.de = PKITBUILD.ER.METHODPARK.DE
 +
 </code> </code>
 +
 +=== AES-256 encryption ===
 +
 +To use AES-256 encryption add  aes256-cts  to the list of  default_tkt_enctypes  and  default_tgs_enctypes .
  
 === Configuration Test === === Configuration Test ===
Line 86: Line 92:
   * Type ''<font inherit/Courier New,Courier,monospace;;inherit;;inherit>bin\testAutoLogin.bat</font>''  (on Windows) or <font inherit/Courier New,Courier,monospace;;inherit;;inherit>''bin/testAutoLogin.sh''</font> (on Unix) and hit enter.   * Type ''<font inherit/Courier New,Courier,monospace;;inherit;;inherit>bin\testAutoLogin.bat</font>''  (on Windows) or <font inherit/Courier New,Courier,monospace;;inherit;;inherit>''bin/testAutoLogin.sh''</font> (on Unix) and hit enter.
   * Watch the command prompt for output messages.   * Watch the command prompt for output messages.
 +
 +===   ===
  
 \\ \\