Kerberos authentication between Java on Linux and Exchange Web Services (EWS)

Is it possible that a Java process running on linux accesses EWS using keberons is not required unless a predefined username and password combination is required?

My current system architecture consists of a Java process that accesses the EWS using the stored username and password combination. The requirement is to make sure that the credentials running the Java process are authenticated to Exchange using Kerberos.

Is it possible to set this setting?

+1


source to share


4 answers


You load the TGT in the ticket cache or keytab for that account.



0


source


yes, it must be able to authenticate to the EWS using Kerberos. You can use Java GSSAPI to get Kerberos tickets (from ticket cache or user request). There is a Java GSS Sample Program at http://docs.oracle.com/javase/1.5.0/docs/guide/security/jgss/tutorials/BasicClientServer.html



0


source


Your question seems to be more about what Java can do versus what Exchange / IIS can do. I don't know Java at all, but I know EWS and IIS topics well.

Here's a thing to remember - IIS is authenticating, not EWS. You can do an HTTP GET on a file in a virtual folder on the IIS server to make sure your API is working. If you can authenticate to IIS, then EWS should work. Now, having said that you also need sharing access issues - that is, impersonation and delegation - you need to make sure you have the required content in the XML EWS, and you have the correct Exchange settings for impersonation and the correct folder permissions. set for delegation.

0


source


Yes it is possible. It is already implemented in "JWebServices for Exchange", Java API for EWS

0


source







All Articles