Monday, May 30, 2011

Spring security Kerberos Integration

Spring Security Kerberos Extension, authenticated the users against web application just by opening the URL. There is no need to enter a username/password and no need to install additional software.

To enable this integration we need the following steps,

1- Create a user in the active directory
i. server1
Set up the user password policy to non-expiring password

2- Create SPN for the user (Step 1- user)
The following command has to run to create spn for the above user
i. setspn –a username
ii. setspn -a HTTP/server1.domain.com@DOMAIN.COM server1

3- Create Key tab file
The following command has to run to create key tab file.
i. ktpass /out /mapuser /princ -kvno 0 /pass /ptype KRB5_NT_PRINCIPAL
ii. ktpass /out name.keytab /mapuser server1@domain.com /princ HTTP/server1.domain.com@DOMAIN.COM -kvno 0 /pass password /ptype KRB5_NT_PRINCIPAL

For spring configuration and more information please refer the following url

http://blog.springsource.com/2009/09/28/spring-security-kerberos/

8 comments:

Anonymous said...

http://www.purchaselevitranorx.com/#6javatch.blogspot.com - buy viagra [url=http://www.purchaselevitranorx.com/#4javatch.blogspot.com]levitra[/url] levitra
levitra

Anonymous said...

woodworking projects , http://woodworkingplans1.com/#MeleFange woodworking projects

Anonymous said...

the family of pascual duarte ebook http://audiobooksplanet.co.uk/Reza-Javaherdashti/m105815/ free ebook flowers for algernon [url=http://audiobooksplanet.co.uk/fr/Photographie/c1307/?page=23]the vampire and the virgin ebook[/url] ebook inflation

Anonymous said...

ebook crystal http://audiobooksworld.co.uk/Mosab-Hassan-Yousef/p12224/ how to design an ebook [url=http://audiobooksworld.co.uk/Simon-Critchley/m117263/]blaylock ebook torrent[/url] a long walk to freedom ebook
[url=http://audiobooksworld.co.uk/The-Medical-Delivery-Business-Health-Reform-Childbirth-and-the-Economic-Order/p224719/][img]http://audiobooksworld.co.uk/image/5.gif[/img][/url]

Anonymous said...

addwords enterprise risk management software http://buyoem.co.uk/product-36592/Microsoft-Windows-7-Home-Premium-x64-English best invitation software demo [url=http://buyoem.co.uk/it/category-100-101/Sisteme-Operative?page=3]dvd buring software reviews[/url] best firewire software to capture dv
[url=http://buyoem.co.uk/category-8/Office-Tools?page=3]Office Tools - Cheap Legal OEM Software, Software Sale, Download OEM[/url] garage pole software
[url=http://buyoem.co.uk/fr/product-37280/TreeGenerator-2-0][img]http://buyoem.co.uk/image/6.gif[/img][/url]

Anonymous said...

[url=http://certifiedpharmacy.co.uk/products/leukeran.htm][img]http://onlinemedistore.com/2.jpg[/img][/url]
pharmacy assistant programs http://certifiedpharmacy.co.uk/products/sublingual-cialis.htm the hierarchy for a pharmacy [url=http://certifiedpharmacy.co.uk/catalogue/o.htm]pharmacy ce in resorts[/url]
allenhill pharmacy franklin tennessee http://certifiedpharmacy.co.uk/products/plendil.htm pharmacy workers information [url=http://certifiedpharmacy.co.uk/products/effexor-xr.htm]effexor xr[/url]
zitomers pharmacy http://certifiedpharmacy.co.uk/products/chloramphenicol.htm walmart pharmacy hours destin [url=http://certifiedpharmacy.co.uk/products/cialis.htm]pharmacy technician jobs in colorado[/url]
pharmacy tech ces http://certifiedpharmacy.co.uk/products/celebrex.htm pharmacy schools in ga [url=http://certifiedpharmacy.co.uk/products/karela.htm]karela[/url]

Anonymous said...

dating secrets for men [url=http://freeinternetdating.info/love/summer-love-chipmunks]summer love chipmunks[/url] girls in lancashire dating
horney dating site http://freeinternetdating.info/friendship/friendship-village-chesterfield dating hot single women
personal chat and dating online [url=http://freeinternetdating.info/relationships/two-long-term-relationships-failed]examples of good dating profiles[/url] antartic radioactive dating of meteorites

Anonymous said...

شركة تنظيف سجاد بالدمام