Java GSSAPI Kerberos question

Melissa Collins melissa.collins at vordel.com
Mon Aug 25 07:44:15 EDT 2008


Try adding...

   refreshKrb5Config = true

to the props you have below

-----Original Message-----
From: kerberos-bounces at mit.edu [mailto:kerberos-bounces at mit.edu] On
Behalf Of Danny Cho
Sent: 23 August 2008 01:16
To: kerberos at mit.edu
Subject: Java GSSAPI Kerberos question


I am hoping that someone here can help me.  I have a problem with Java
GSSAPI that I don't know how to solve.  I have written a test Java
server which acts as a Kerberos service that uses GSSAPI to authenticate
users connect to the service. Here is my gss.conf:
com.sun.security.jgss.accept {
com.sun.security.auth.module.Krb5LoginModule
required
isInitiator=false
storeKey=true keyTab="/home/danny/temp/GSSKerberosServer/kserver.keytab"
doNotPrompt=true
useKeyTab=true
principal="kserver/danny.com"
debug=true;
};

Everything works fine. But then I tried making the server runtime reload
the keytab by manually (physically) overwritten the keytab file but
noticed that the new file doesn't get read (it still uses the old key)
when a new GSSCredential is created.  Can someone please tell me how to
tell GSSAPI to re-read the keytab?  I can post my test server code if
anyone wants to see it. ________________________________________________
Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos





More information about the Kerberos mailing list