CAS Spnego

[m.garuti]

I've read the wiki on the CAS Spnego configuration found here

 

http://www.ja-sig.org/wiki/display/CASUM/SPNEGO

 

I'm trying to configure the CAS on a windows server machine. What i don't understand from the wiki is where I have to put the file myspnaccount.keytab on windows CAS server. The only references to this file are for testing Kerberos from bash command line. Seems that is not necessary on windows, isn't it?

 

Thanks for your help.

paco

 

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[Michael Ströder]

m.garuti@... wrote:
>   I've read the wiki on the CAS Spnego configuration found here
>  
> http://www.ja-sig.org/wiki/display/CASUM/SPNEGO
>  
> I'm trying to configure the CAS on a windows server machine. What i
> don't understand from the wiki is where I have to put the file
> myspnaccount.keytab on windows CAS server. The only references to this
> file are for testing Kerberos from bash command line. Seems that is not
> necessary on windows, isn't it?

You don't need the keytab file and file krb5.conf at all if you
configure the service account's password in file
deployerConfigContext.xml (jcifsConfig bean, properties
jcifsServicePrincipal and jcifsServicePassword). Note that execution of
KTPASS.EXE is also done to set the servicePrincipalName in the service
account's AD entry.

See also:
http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/KerberosReq.html

Ciao, Michael.
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas