org.clazzes.login.kerberos

The kerberos-login-service is only on the wish list, but not yet implemented.

Functionality

NYI.

The kerberos-login-service shall enable web applications to provide single-sign-on towards Windows desktop login, based on Microsoft's kerberos approach.

Sample Configuration

TBD.

Further reading

• Java API entry point: http://docs.oracle.com/javase/7/docs/api/org/ietf/jgss/GSSManager.html
• Kerberos Debugging with Wireshark: http://blogs.msdn.com/b/friis/archive/2009/12/31/things-to-check-when-kerberos-authentication-fails-using-iis-ie.aspx
• Adding a webserver as SPN to an ADS user: http://support.microsoft.com/kb/929650/en-us
• Example for JAVA code with SPNEGO/kerberos http://s2.diffuse.it/blog/show/6602-SPNEGO_authentication_and_credential_delegation_with_Java
• Step-by-step guide http://stackoverflow.com/questions/25289231/using-gssmanager-to-validate-a-kerberos-ticket