Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
72:configure_jaas_jgss [2018/07/06 18:39] – [Configure JAAS and JGSS Support on the Stages Server] bkkr | 72:configure_jaas_jgss [2024/02/15 00:00] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 5: | Line 5: | ||
=== Java Authentication and Authorization Service (JAAS) === | === Java Authentication and Authorization Service (JAAS) === | ||
- | JAAS is a standard Java API, which has to be configured with your network settings. Please edit the provided example file <font inherit/ | + | JAAS is a standard Java API, which has to be configured with your network settings. Please edit the provided example file '' |
< | < | ||
Line 11: | Line 11: | ||
com.sun.security.auth.module.Krb5LoginModule required | com.sun.security.auth.module.Krb5LoginModule required | ||
useKeyTab=true | useKeyTab=true | ||
- | keyTab="" | + | keyTab=" |
storeKey=true | storeKey=true | ||
realm="< | realm="< | ||
debug=" | debug=" | ||
- | principal=" | + | principal=" |
- | } | + | }; |
</ | </ | ||
Line 24: | Line 25: | ||
|< | |< | ||
- | Example: | + | Example:< |
- | < | ||
de.methodpark.pkit.auth.SpnegoAuthenticator { | de.methodpark.pkit.auth.SpnegoAuthenticator { | ||
| | ||
Line 34: | Line 34: | ||
| | ||
| | ||
- | | + | |
- | } | + | }; |
</ | </ | ||
=== Java Generic Security Services (JGSS) === | === Java Generic Security Services (JGSS) === | ||
- | JGSS is another Java Standard API, which has to be configured with your network information. Please edit the provided example file “/ | + | JGSS is another Java Standard API, which has to be configured with your network information. Please edit the provided example file '' |
< | < | ||
Line 55: | Line 56: | ||
.< | .< | ||
< | < | ||
+ | |||
</ | </ | ||
Line 62: | Line 64: | ||
|< | |< | ||
- | Example: | + | Example:< |
+ | |||
+ | [libdefaults] | ||
+ | default_realm = PKITBUILD.ER.METHODPARK.DE | ||
+ | default_tkt_enctypes = aes128-cts rc4-hmac des3-cbc-sha1 des-cbc-md5 des-cbc-crc | ||
+ | default_tgs_enctypes = aes128-cts rc4-hmac des3-cbc-sha1 des-cbc-md5 des-cbc-crc | ||
+ | forwardable = true | ||
+ | [realms] | ||
+ | PKITBUILD.ER.METHODPARK.DE = { | ||
+ | kdc = projectkit.pkitbuild.er.methodpark.de: | ||
+ | } | ||
+ | [domain_realm] | ||
+ | .pkitbuild.er.methodpark.de = PKITBUILD.ER.METHODPARK.DE | ||
+ | pkitbuild.er.methodpark.de = PKITBUILD.ER.METHODPARK.DE | ||
+ | |||
+ | </ | ||
+ | |||
+ | === AES-256 encryption === | ||
+ | |||
+ | To use AES-256 encryption add aes256-cts | ||
+ | |||
+ | === Configuration Test === | ||
+ | |||
+ | To test your JAAS and JGSS configuration in a Stages server environment proceed in the way described below: | ||
+ | |||
+ | * Open a command prompt and change to the < | ||
+ | * Type '' | ||
+ | * Watch the command prompt for output messages. | ||
+ | |||
+ | === === | ||
\\ | \\ | ||