[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Kerberos authentication & JAVA JNDI



Hi Kevin,
> I just subscribed to this list.  I've reviewed quite a few of the
> archives regarding Kerberos authentication.  I didn't find anything
> relating to my problem.  I sure hope someone can help.  I'm having
> problems getting Kerberos authentication working with Java/JNDI...
> 
> Server: OpenLdap 2.0.7, Sun Solaris 2.6, Cyrus SASL 1.5.24
> 
> Client: Windows 2000 Pro, Java 1.3, JNDI 1.2.1
> 
> Client code:
>     env.put("java.naming.factory.initial",
> "com.sun.jndi.ldap.LdapCtxFactory");
>     env.put("java.naming.provider.url",
> "ldap://server.cornell.edu/o=Cornell University, c=US");
>     env.put(Context.SECURITY_AUTHENTICATION, "KERBEROS_V4");
> 
> Client error msg:
> 
>      javax.naming.AuthenticationNotSupportedException: KERBEROS_V4

You'd need an implementation of the Kerberos V4 SASL mechamism in Java.
I haven't come across such a thing yet. However GSSAPI (Krb5) does work:
http://java.sun.com/products/jndi/saslmechs.html

-- 
Norbert Klasen
DFN Directory Services                           tel: +49 7071 29 70335
ZDV, Universität Tübingen                        fax: +49 7071 29 5912
Wächterstr. 76, 72074 Tübingen              http://www.directory.dfn.de
Germany                             norbert.klasen@zdv.uni-tuebingen.de