How to get Service Ticket when we have TGT using java. - Kerberos

This is a discussion on How to get Service Ticket when we have TGT using java. - Kerberos ; Hi, We are implementing WS Kerberos authentication using java. We went throught the sample providied @ http://services.iic.ac.in/kbase/docs...s/AcnOnly.html We have setup Fedora Core 3 and krb5-server and configured. When we run the sample code it gets authenticated successfully, but my question ...

+ Reply to Thread
Results 1 to 3 of 3

Thread: How to get Service Ticket when we have TGT using java.

  1. How to get Service Ticket when we have TGT using java.

    Hi,
    We are implementing WS Kerberos authentication using java. We went
    throught the sample providied @
    http://services.iic.ac.in/kbase/docs...s/AcnOnly.html

    We have setup Fedora Core 3 and krb5-server and configured. When we run
    the sample code it gets authenticated successfully, but my question is
    :

    How to get Kerberos Service Ticket after logging in succesfully and
    getting the TGT using java 1.4.2_04 and Fedora Core 3 [krb5-server]

    LoginContext lc ...
    ...
    lc.login();

    after this step,
    we can say lc.getSubject() which contains the kerberos ticket, now
    using this how do we get the service ticket.


    Googled for help, but not much help.

    Another Question :
    went through
    http://www-128.ibm.com/developerwork...rary/j-gssapi/.
    Why do we need to write both server and client ?.

    Thanks in advance,
    /Veeru.


  2. Re: How to get Service Ticket when we have TGT using java.

    try something like:

    Credentials serviceCreds =
    Credentials.acquireServiceTicket(ServicePrincipalN ame, tgtCredentials);

    /Bo
    http://appliedcrypto.com

    Veeru wrote:

    >Hi,
    > We are implementing WS Kerberos authentication using java. We went
    >throught the sample providied @
    >http://services.iic.ac.in/kbase/docs...s/AcnOnly.html
    >
    >We have setup Fedora Core 3 and krb5-server and configured. When we run
    >the sample code it gets authenticated successfully, but my question is
    >:
    >
    >How to get Kerberos Service Ticket after logging in succesfully and
    >getting the TGT using java 1.4.2_04 and Fedora Core 3 [krb5-server]
    >
    >LoginContext lc ...
    >..
    >lc.login();
    >
    >after this step,
    >we can say lc.getSubject() which contains the kerberos ticket, now
    >using this how do we get the service ticket.
    >
    >
    >Googled for help, but not much help.
    >
    >Another Question :
    >went through
    >http://www-128.ibm.com/developerwork...rary/j-gssapi/.
    >Why do we need to write both server and client ?.
    >
    >Thanks in advance,
    >/Veeru.
    >
    >________________________________________________
    >Kerberos mailing list Kerberos@mit.edu
    >https://mailman.mit.edu/mailman/listinfo/kerberos
    >
    >
    >


    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


  3. Re: How to get Service Ticket when we have TGT using java.

    Sun's implementation of Java GSS/Kerberos will use the TGT from the
    Subject, and obtain the Kerberos service Ticket. The Kerberos Service
    Ticket is also stored in the Subject's private Credentials. After
    successful Kerberos authentication, you can retrieve it from the JAAS
    Subject.

    Seema

    Veeru wrote:

    >Hi,
    > We are implementing WS Kerberos authentication using java. We went
    >throught the sample providied @
    >http://services.iic.ac.in/kbase/docs...s/AcnOnly.html
    >
    >We have setup Fedora Core 3 and krb5-server and configured. When we run
    >the sample code it gets authenticated successfully, but my question is
    >:
    >
    >How to get Kerberos Service Ticket after logging in succesfully and
    >getting the TGT using java 1.4.2_04 and Fedora Core 3 [krb5-server]
    >
    >LoginContext lc ...
    >..
    >lc.login();
    >
    >after this step,
    >we can say lc.getSubject() which contains the kerberos ticket, now
    >using this how do we get the service ticket.
    >
    >
    >Googled for help, but not much help.
    >
    >Another Question :
    >went through
    >http://www-128.ibm.com/developerwork...rary/j-gssapi/.
    >Why do we need to write both server and client ?.
    >
    >Thanks in advance,
    >/Veeru.
    >
    >________________________________________________
    >Kerberos mailing list Kerberos@mit.edu
    >https://mailman.mit.edu/mailman/listinfo/kerberos
    >
    >


    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


+ Reply to Thread