The kerberos-login-service is only on the wish list, but not yet implemented.
Functionality
NYI.
The kerberos-login-service shall enable web applications to provide single-sign-on towards Windows desktop login, based on Microsoft's kerberos approach.
Sample Configuration
TBD.
Further reading
- Java API entry point: http://docs.oracle.com/javase/7/docs/api/org/ietf/jgss/GSSManager.html
- Kerberos Debugging with Wireshark: http://blogs.msdn.com/b/friis/archive/2009/12/31/things-to-check-when-kerberos-authentication-fails-using-iis-ie.aspx
- Adding a webserver as SPN to an ADS user: http://support.microsoft.com/kb/929650/en-us
- Example for JAVA code with SPNEGO/kerberos http://s2.diffuse.it/blog/show/6602-SPNEGO_authentication_and_credential_delegation_with_Java