axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Boris Dushanov (JIRA)" <>
Subject [jira] [Issue Comment Deleted] (RAMPART-433) Support for Kerberos v5 delegated authentication
Date Fri, 20 May 2016 10:50:12 GMT


Boris Dushanov updated RAMPART-433:
    Comment: was deleted

(was: No it doesn't but I can attach generated keytab files which are needed for the tests
to run.The thing is that it's not possible to provide binaries with eclipse patch.
What do you prefer?)

> Support for Kerberos v5 delegated authentication
> ------------------------------------------------
>                 Key: RAMPART-433
>                 URL:
>             Project: Rampart
>          Issue Type: New Feature
>          Components: rampart-core
>    Affects Versions: 1.6.2
>            Reporter: Boris Dushanov
>             Fix For: 1.8.0
>         Attachments: rampart_kerberos_delegation.patch
> This support is based on the Kerberos v5 enhancement provided in RAMPART-417.
> Kerberos delegation is supported in wss4j since 1.6.17 so this feature requires upgrade
from 1.6.16 to 1.6.17.The upgrade is smooth and requires no changes.
> The changes in rampart uses the wss4j capabilities.Rampart's kerberos configuration is
enhanced with two new settings - one for requesting a kerberos delegation credential and one
for setting such. When the latter is set, rampart requests a Kerberos security token on behalf
of the user for which the credentials are.
> The provided implementation also includes a corresponding integration test. ApacheDS
2.0 is required as 1.5.7 seems to have issues when delegation is requested.Because of that,
the existing kerberos tests are also made to work with the newer ApacheDS version.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message