wood burning stoves 2.0*
The moose likes Websphere and the fly likes JAAS Kerberos login on WebSphere Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of The Java EE 7 Tutorial Volume 1 or Volume 2 this week in the Java EE forum
or jQuery UI in Action in the JavaScript forum!
JavaRanch » Java Forums » Products » Websphere
Bookmark "JAAS Kerberos login on WebSphere" Watch "JAAS Kerberos login on WebSphere" New topic

JAAS Kerberos login on WebSphere

David Tsai

Joined: Aug 25, 2004
Posts: 1

I'm attempting JAAS login on WebSphere using Kerberos.
Running my code as a standalone Java application, my program runs without errors. My login.conf file is

However, when I tried running my code as a web service, I run into trouble. I've tried testing new login module configurations both in the login.conf file and in administrative console; the ones I've tested include:

1) com.ibm.security.auth.module.Krb5LoginModule required;
2) com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy required delegate = com.ibm.security.auth.module.Krb5LoginModule;
3) com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy required delegate = com.sun.security.auth.module.Krb5LoginModule;

None of them seem to work. Note that I have changed my code so that it is compliant with WebSphere:

My code always crashes on the last line, usually with a Preauthentification Failed error. I'm thinking that perhaps by doing doing WSLogin/WSCallbackHandlerImpl/WSSubject that somehow I am no longer authenticating with kerberos but am instead authenticating with something in Websphere.

Any ideas on how I fix this would be greatly appreciated.
[ August 25, 2004: Message edited by: David Tsai ]
I agree. Here's the link: http://aspose.com/file-tools
subject: JAAS Kerberos login on WebSphere