Win a copy of Re-engineering Legacy Software this week in the Refactoring forum
or Docker in Action in the Cloud/Virtualization forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

JAAS Kerberos login on WebSphere

 
David Tsai
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

I'm attempting JAAS login on WebSphere using Kerberos.
Running my code as a standalone Java application, my program runs without errors. My login.conf file is


However, when I tried running my code as a web service, I run into trouble. I've tried testing new login module configurations both in the login.conf file and in administrative console; the ones I've tested include:

1) com.ibm.security.auth.module.Krb5LoginModule required;
2) com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy required delegate = com.ibm.security.auth.module.Krb5LoginModule;
3) com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy required delegate = com.sun.security.auth.module.Krb5LoginModule;


None of them seem to work. Note that I have changed my code so that it is compliant with WebSphere:



My code always crashes on the last line, usually with a Preauthentification Failed error. I'm thinking that perhaps by doing doing WSLogin/WSCallbackHandlerImpl/WSSubject that somehow I am no longer authenticating with kerberos but am instead authenticating with something in Websphere.

Any ideas on how I fix this would be greatly appreciated.
[ August 25, 2004: Message edited by: David Tsai ]
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic