How to pass kerberos ticket at api level?

Question

Hi,
Am relatively new in the domain of Java Security, JAAS and JGSS. After reading the tutorials and examples, I was able to do authentication and message transfer using Kerberos LoginModule. All the examples demonstrates message transfer and credential passing at socket level.
But in normal scenario's a server application exposes its APIs and the clients invokes remote methods on the server instead of sending data at a socket level.
My question is can I use kerberos and JGSS to pass security context at api level without adding an arguement for security context in each api call?
In simple terms, Is it possible to implicitly pass user credential's to server at each api call instead of exchanging/encrypting data at socket level?
Is there any other mechanism that meets this kind of requirement?
Thanks,
Kapil

Answer 1

Seema, could you please elaborate on how GSS context is established?
The examples show that context is established after series of message passing between client and server inside a while loop
while (!peerContext.isEstablished()) {
                   byteToken = peerContext.initSecContext(byteToken, 0, byteToken.length);
                if (byteToken != null) {
                    outStream.writeInt(byteToken.length);
                    outStream.write(byteToken );
                    outStream.flush();
                }//if
                if (!peerContext.isEstablished()) {
                    byteToken  = new byte[inStream.readInt()];
                    inStream.readFully(byteToken );
                }//if
            }//while (!peerContext...)Is there any other way to establish GSS context ?
Thanks & Regards,
Kapil