Java Krb5LoginModule keytab : Mystery Debunked!

Finally after ages of work, mystery has been debunked for how to use Krb5LoginModule in Java with keytab.

You will be happy to know that the culprit was quote ("). All keytab service principals should be specified under quotes for them to work.

So, your resulting login module config / JAAS config file looks like


SampleServer {
     com.sun.security.auth.module.Krb5LoginModule
     required 
     useKeyTab=true
     principal="<spn e.g. host/test@blah.net>"
     doNotPrompt=true
     renewTGT=false
};

Hope this helps you guys!

Comments

Popular Posts