Comments on: Spring Security Kerberos/SPNEGO Extension http://blog.springsource.org/2009/09/28/spring-security-kerberos/ The voice of SpringSource Wed, 08 Feb 2012 17:31:53 +0000 hourly 1 http://wordpress.org/?v=3.1.1 By: Aurelien http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-205181 Aurelien Mon, 10 Oct 2011 09:19:53 +0000 http://blog.springsource.com/?p=2756#comment-205181 Could it be possible to use Spring Security Kerberos Extension with multiple domains (on separate forests with a two-way forest trust) by merging keytab files ? Could it be possible to use Spring Security Kerberos Extension with multiple domains (on separate forests with a two-way forest trust) by merging keytab files ?

]]> By: Zoharat http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-204408 Zoharat Mon, 03 Oct 2011 17:08:47 +0000 http://blog.springsource.com/?p=2756#comment-204408 So simply specifying a kvno value fixed the NTLM token issue you observed Windows? So simply specifying a kvno value fixed the NTLM token issue you observed Windows?

]]> By: Tul http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-204406 Tul Mon, 03 Oct 2011 17:02:38 +0000 http://blog.springsource.com/?p=2756#comment-204406 Zoharat, In my case it was a matter of bad kvno in keytab. Unfortunately I can't give you a recipe as the admin fixed that, not me. He said that some kind of example app of Apache Kerberos helped him a lot as it gives much better error information. At least you have a hint. Zoharat,
In my case it was a matter of bad kvno in keytab. Unfortunately I can't give you a recipe as the admin fixed that, not me. He said that some kind of example app of Apache Kerberos helped him a lot as it gives much better error information.
At least you have a hint.

]]> By: Zoharat http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-204404 Zoharat Mon, 03 Oct 2011 15:22:03 +0000 http://blog.springsource.com/?p=2756#comment-204404 Tul, Were you able to figure out why NTLM token were being generated, we have done all the verifcations i.e. 1>Server client on separate machines 2>Site listed in Intranet sites. 3>Using the URL as http://:/application 4>kinit also seems to work. But still the header contains NTLM token. Tul,

Were you able to figure out why NTLM token were being generated, we have done all the verifcations i.e.
1>Server client on separate machines
2>Site listed in Intranet sites.
3>Using the URL as http://:/application
4>kinit also seems to work.

But still the header contains NTLM token.

]]> By: Zoharat http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-204403 Zoharat Mon, 03 Oct 2011 15:20:25 +0000 http://blog.springsource.com/?p=2756#comment-204403 Tul, Were you able to figure out why NTLM token were being generated, we have done all the verifcations i.e. 1>Server client on separate machines 2>Site listed in Intranet sites. 3>Using the URL as http://:/application 4>kinit also seems to work. But still the header contains NTLM tokens. Tul,

Were you able to figure out why NTLM token were being generated, we have done all the verifcations i.e.
1>Server client on separate machines
2>Site listed in Intranet sites.
3>Using the URL as http://:/application
4>kinit also seems to work.

But still the header contains NTLM tokens.

]]> By: OCTO talks ! » Implementando Segurança em um aplicativo Flex/BlazeDS utilizando o Single-Sign-On do Active Directory http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-202775 OCTO talks ! » Implementando Segurança em um aplicativo Flex/BlazeDS utilizando o Single-Sign-On do Active Directory Fri, 23 Sep 2011 18:59:28 +0000 http://blog.springsource.com/?p=2756#comment-202775 [...] O manual da extensão (incluindo a configuração Internet Explorer) [...] [...] O manual da extensão (incluindo a configuração Internet Explorer) [...]

]]> By: Nick http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-202735 Nick Fri, 23 Sep 2011 07:13:31 +0000 http://blog.springsource.com/?p=2756#comment-202735 Hi, Can anyone tell me where the repository was moved to? http://maven.springframework.org/milestone seems not to be working anymore... And is 1.0.0.M1 still the current version? Thanks a lot for your responses. Hi,

Can anyone tell me where the repository was moved to? http://maven.springframework.org/milestone seems not to be working anymore… And is 1.0.0.M1 still the current version?

Thanks a lot for your responses.

]]> By: Tul http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-202637 Tul Wed, 21 Sep 2011 10:42:11 +0000 http://blog.springsource.com/?p=2756#comment-202637 Now I tried to deploy app on linux tomcat and I get 'javax.security.auth.login.LoginException: Unable to obtain password from user' on server startup with no corresponding '[key] not available in [keytab]' message. Keytab is generated using java 1.5 ktab. I generated it in the same way previously on windows server and spring read the principals successfully. Now I tried to deploy app on linux tomcat and I get 'javax.security.auth.login.LoginException: Unable to obtain password from user' on server startup with no corresponding '[key] not available in [keytab]' message. Keytab is generated using java 1.5 ktab. I generated it in the same way previously on windows server and spring read the principals successfully.

]]> By: Tul http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-202633 Tul Wed, 21 Sep 2011 09:47:25 +0000 http://blog.springsource.com/?p=2756#comment-202633 It's in intranet zone. The browser is IE9 but I also tried IE7, 6 and firefox It's in intranet zone. The browser is IE9 but I also tried IE7, 6 and firefox

]]> By: ukdavo http://blog.springsource.org/2009/09/28/spring-security-kerberos/comment-page-2/#comment-202626 ukdavo Wed, 21 Sep 2011 08:27:09 +0000 http://blog.springsource.com/?p=2756#comment-202626 What zone is the website in? Internet zone? Intranet zone? If the latter, NTLM will be used. What zone is the website in? Internet zone? Intranet zone? If the latter, NTLM will be used.

]]>