Can you make Kerberos validate a ticket against the server?

I do not know if what I am describing is possible/feasible - so please forgive my ignorance.
I am trying to create a Kerberos single sign-on java desktop application (there is on webpage involved, and we does not try to log into other applications from there), using only the functionality built into Java (we are running Java 6.0), and on WIndows XP.
The point of what we are trying to do is to archive the ability to
1) Authenticate the user of the program, both for history keeping, but also to keep people who have no business out of our application (we do not explicitly need authorization, as this is taken care of internally in the application)
2) Avoid any kind of log-in screen (in other words single sign-on, with the sign-on to the Windows user account as the first and only sign on).
in that prioritized order.
After having poking around for a while we finally got Kerberos in a semi working state - without any forms of external configuration files. However, the only way I have found to avoid having to deal with the CallbackHandler (which would mean we would need to have the user intervene - invalidating #2) has been to add the cachedTicket option.
However, when I do so, there does not seem to be made any kind of validation against the server (the realm and KDC information can be freely set to gibberish - and it works even if the account that I do it from has been invalidated). This seems almost (I said almost) seems as unsafe as the "System.getProperty( "user.name" );" we started looking at in the beginning.
If I have to go through the CallbackHandler then everything is OK (fails if the realm and KDC information is not correct - and likewise when my account has been deactivated, fails on any possible combination of bad password and/or username).
So my question is: Is there a way to login securely, without having to prompt the user for his windows account and password (perhaps a special configuration). If so, do I need to use a keytab (we would prefer not to, but if that is what it takes....), should I look into authorization as a workaround (if it indeed could as such), using a third party Kerberos system (such as the one from FemiLab), something entirely different - or is what I am describing impossible?
If needed I would be able to provide code snippets.
Thank you for your time :)

Hi,
I've attached the llb file from the examples folder \LabVIEW\Examples\Comm
This is a LabVIEW 5.1.1 folder but it should open in Ver 6 OK. But there maybe some links to other example VI.
Regards
Ray Farmer
Regards
Ray Farmer
Attachments:
comm.zip ‏335 KB

Similar Messages

  • Can you make an attachment non-visible in the body of the letter?

    I am wondering if it is possible to include an attachment in an email without it automatically opening up full size in the place in the email where you place it.
    I am referring to those that automatically appear, of course, such as a graphic. Can you choose to have the little square of the file itself rather than the full opened representation?

    I just found lots of information posted here:
    http://discussions.apple.com/thread.jspa?messageID=4612252&#4612252
    that suggests that there is no way to selectively not have the graphic appear 'inline'.
    I think this would make a great new feature of the mail program. Some other programs that receive the email may or may not show it, but for those that always do, I would want the sender to have the option when attaching it.

  • Can you make Sysprep on Windows 8.1 and Server 2012 R2 Prompt for a Computer Name

    Hi guys,
    Our Windows 7 Unattend.xml has always made Sysprep prompt for Computer Name. I'm struggling to achieve that with Windows 8.1 and Svr 2012 R2.
    Firstly: Is it still possible?
    Secondly: If so, How?
    Thanks

    OOBE will only hide pages that contain the answers in the XML. So if you want OOBE to prompt for a computer name, make sure your XML does not contain the ComputerName object.

  • Can you make a line in audible on the iMac?

    Hey guys. I just purchased my first mac. I bought the iMac 20'' 2.0 ghz . One question I have: Is there any way to have an inputs sound be played through my speakers?
    The reason I ask is that I have an MPC-1000, Korg Triton keyboard, and Bluebird microphone hooked up to a mixer. From that mixer, I have always had it lined into my windows based PC. When I wasnt using the mic, I could unplug and listen to my keyboard/MPC through the computers speakers by unmuting the line in from the sound preferences.
    On the iMac, I purchased the iMic USB adapter and have my external speakers plugged into the OUT and the line in from my mixer into the IN. Obviously when recording vocals you do not want to be able to hear yourself through the speakers, but I do need to hear my keyboard/mpc. Any way to mute? I could not find a thing anywhere to see if I could do this. Thanks guys. I appreciate the help.

    Hi Rick
    A simple option for pass thru from line-in to line-out is the Leopard compatible LineIn 2.0.3 at MacUpdate.
    http://www.macupdate.com/info.php/id/11333
    Dennis

  • Can you make a song your ringtone on the iphone 4

    I would like to know if i can use songs i have downloaded as my ringtone? And if i can how do i do so? I have an iphone 4. Please Help!!!

    http://www.ehow.com/how_2160460_custom-iphone-ringtones-free.html

  • Can you run multiple Excel Services Applications against a single Web Application?

    I have been struggling with this one for a while now, hopefully someone can help me understand what I am missing...
    I have a single SharePoint Farm.  This farm runs multiple Web Applications & the Service Applications.
    1. SharePoint Only Server with Multiple Site Collections (http://sharepoint.com/...)
    2. MS Project Server with Multiple Site Collections (http://pwa.com/...)
    3. My services applications all exist on the same farm.
    I was under the impression, and believe that I validated this through testing and from this site (http://blogs.office.com/2009/11/16/excel-services-in-sharepoint-2010-administration-improvements),
    that you can only run a single Excel Services Application against each unique Web Application.  In essence, I can run one Excel Services Application against the SharePoint Only Server, and another Excel Services Application against the MS Project
    Server...  However, I can NOT run multiple Excel Services Applications against the different Site Collections within the MS Project Server becuase it is only aware of its "default" Excel Service Application. 
    ie. I can NOT do the following:  ExcelServiceApp1 for
    http://pwa.com/SiteA & ExcelServiceApp2 for
    http://pwa.com/SiteB
    Is that correct?
    If that is not correct, then I must be missing a way to specify a different Excel Service App for each Project Web App Site. 
    Some other solutions that I think may work, but would really appreciate if someone could validate:
    - Create multiple Project Server Service Applications for each instance of PWA/Excel Service? (but wouldn't this still have to use one of the two WebApplications and cause the same limitation?)
    - Create a new Web Applciation for each PWA/Excel Service?  (ie.
    http://pwasite1.com;
    http://pwasite2.com; http://pwasite3.com, etc.)
    Thoughts/suggestions are very greatly appreciated!!!

    Hello Trpy2k
    I have not done what you are doing and I assume that you are using project server 2010.  However, you answer lives in PowerShell.
    The New-WebServiceProxy show that you can create a new proxy by spacing a URL and not a web application. The default proxy from the web application is directing to the default excel service.  If you need another excel service, you must specify another
    proxy and this may do it for you.
    Also, don't forget the Secure State service and that each excel report will need this configured, that is with the assumption that the other excel service requires different authentication.
    PS.  This question may get a better answer in the SharePoint forums.
    Cheers!
    Michael Wharton, MVP, MBA, PMP, MCT, MCTS, MCSD, MCSE+I, MCDBA
    Website http://www.WhartonComputer.com
    Blog http://MyProjectExpert.com contains my field notes and SQL queries

  • How can you make one button preform different actions in Xcode?

    How can you make one button "preform a click" and "orderfront"? Is that possible? Because what I am doing is making a welcome window to my application for Mac OS X 10.6, and I have two buttons in that window, one says "Connect" which connects a a WebView to a url and the other button opens up the main window. So how can I a make a button do multiple things at once??

    Ah - If you are just using bindings between various objects from Interface Builder, you can reduce your application code a bit (sometimes quite a bit), but there is only so far you can go. Typically variables and routines are defined in your application that Interface Builder hooks into, so that your application code (usually Objective-C, but can be others) can use these variables and routines to determine what is happening in the user interface.
    I'm not sure how up-to-date the project code is (or what programming code you are familiar with), but you can take a look at Apple's Cocoa Application Tutorial to see what is (usually) involved in creating an application.

  • How can you make the iPod tell the diff between a movie and music video

    Greetings!
    How can you make iPod tell the difference between a Music Video and Movie? Everything I put up on the iPod falls into Movie. So is it something I have to do in iTunes?
    Thanks for the help!

    Rightclick the video in iTUnes, hit Get info then the "Options" tab. Beside kind you can set it to movie. music video. or TV show

  • Is there a way to view earlier messages in a thread without going through each day? Also, can you make a photo album from the same text thread without going back to the beginning?

    Is there a way to view earlier messages in a thread without going through each day? Also, can you make a photo album from the same text thread without going back to the beginning?

    Turn Settings > General > Accessibility > Zoom to ON.

  • Do you have to down load from the internet using apple's recover partition, every time you need to do a clean install? or can you make a copy of Mt Lion onto a USB stick and install off that?

    Do you have to down load Mountain Lion from the internet every time you need to do a clean install? or can you make a copy of Mt Lion onto a USB stick and install off that?
    Thanks

    Yes you can make a USB stick of Lion or Mt Lion. Use Lion Disk Maker after you download OS X from the internet.
    For Lion you have to point the download to an external drive and watch when it completes and reboots the system to start the install disconnect the external. If you bought Mt Lion from the Mac App Store then you can download it from there and just cancel the install when it comes up on the desktop.
    If you are downloading from the Recovery HD or from the Online Internet Recovery system, slightly different then the built in Recovery HD, then again you need to point it to an external drive and discoonect that drive when the system reboots to start the real install.
    Then use Lion disk maker to create either a DVD disc or USB thumb of the install files.

  • How can you make your persona show on the top and bottom? Also can you make it bigger at the top to show more of the picture?

    How can you make your persona show on the top and bottom?
    Also can you make it bigger at the top to show more of the picture?

    Add extra empty toolbars if you want to see more of the persona.<br />
    You can create extra toolbars to get extra space via View > Toolbars > Customize<br />
    You have to put something on a toolbar (drag a Space item onto it) before closing the Customize window because empty toolbars are automatically removed.<br />
    See http://kb.mozillazine.org/Toolbar_customization

  • Can you make an animated gif from edge animate?

    Can you make an animated gif from edge animate?

    not natively. edge exports html and javascript files, not video files, or frames.
    however, you could use a third-party program that has a video screenshot function and make one that way.

  • Can you make an existing document into a .pdf file?

    can you make an existing document into a .pdf file? I used to use pdf factory before my system recovery. I do not want to reinstall that program. Can I do this in Acrobat Reader 7?

    Adobe sell Acrobat (in various versions) to do this.
    Aandi Inston

  • Can you make captions for a slideshow?

    can you make captions for a slideshow? otherwise how can i rename the photo so that i can select view titles in the slideshow and use it as a caption?

    Jim lo:
    Welcome to the Apple Discussions. You can't make captions with iPhoto. You can edit the title of a photo by selecting it and then going to the Info window at the bottom of the Source pane, the "i" button, clicking on the title field and enter what text you'd like.
    If you plan on using the slideshow in iDVD then those titles will not show as they will be lost in the "overscan" area that is common to all movies played on TV. You can create the slideshow in iMovie and have lots of control over titles and subtitles and greater control of the audio track, cut, fade in/out, etc.
    Do you Twango?

  • I just bought a used Macbook Pro. How do I make the changes to make it personal. Example the iTunes comes up as the old user and I have to have his password to make changes on the laptop. Can you make any suggestions?

    I just bought a used Macbook Pro. How do I make the changes to make it personal. Example the iTunes comes up as the old user and I have to have his password to make changes on the laptop. Can you make any suggestions?
    Also I cant make a right click on the pad. Is that normal?

    Your first going to have to remove all your personal data off the machine to a external storage drive, do not use TimeMachine when it asks as this will copy the entire drive and is unnecessary at this time (also takes too long).
    You need to drag and drop copy your personal data folders (Music, Pictures, Movies etc) to a external storage drive, once done, unmount and disconnect this drive.
    Most commonly used backup methods
    Next your going to follow the Zero Erase and install method for your OS X version, either 10.6 or 10.7, here
    How to reinstall just OS X or erase/install OS X
    10.7 requires your AppleID and password to install, so make sure to have that ready.
    Once you reboot your into the real setup of OS X, which will require your name etc, so it's now your machine.
    Install your programs, iLife package is only free for the owner of the machine.
    If you have the 10.6 machine specific disks, then it's on there.
    If your using 10.7, then you'll have to purchase it from the App Store.
    Last, return your files from the storage drive, consider setting up a TimeMachine or clone on the external drive.

Maybe you are looking for