Can Kerberos Authentication be integrated in Jetty 6?

We currently have an application that runs the built-in Jetty 6.1.14 server, which needs to add authentication via Kerberos. I'm new to Kerberos which makes the task 100x harder, perhaps it should. I scoured the internet and found conflicting reports as to whether this is even possible , but gives nothing on how to proceed.

I succeeded that the server was mostly able to authenticate users through kerberos, but cannot find the client to automatically submit its ticket to kerberos: I have to use the auth method, although there are hints that these might be filters that are very poorly documented.

My question - and I apologize for being a little vague, I haven't been that annoyed for quite some time - should I ask for some guidance on getting Kerberos authentication enabled without login forms in Jetty 6? Or am I just unlucky? Has anyone added this authentication type to jetty 6?

+2


source to share


2 answers


If Jetty supports Servlet Filters (JSR-53) then this open source project http://spnego.sourceforge.net might be what you are looking for.



0


source


First, you must prepare your domain environment. Make sure your server is part of your domain (joined it). Then you need to create a machine account and assign an SPN. If you've done so, create a keytab for this account. From now on, the client will be able to find a host in the domain and create a ticket. Then Jetty comes into play.



0


source







All Articles