Kerberos Authentication on an NT machine.

Question

I have this config file:
MyAuth {
com.sun.security.auth.module.Krb5LoginModule required useTicketCache=true doNotPrompt=true;
I want to authenticate a user using an already existing Kerberos Cache. This works fine on a sun box, but fails on an NT. I think I need to set the TicketCache attribute for the NT machine, but can't find out how designate the memory cache. Anyone have any idea how to do this (which enables single signon)?

Answer 1

A listing of the Exception would have been good, however, l can give you a few tips on where to look.
(1) Check your runtime arguments that you supply to the JAAS login module. They should include:
% java -Djava.security.manager
-Djava.security.krb5.realm=<your_realm>
-Djava.security.krb5.kdc=<your_kdc>
-Djava.security.auth.login.config=jaas.conf JaasLogin
Namely check that your realm and kdc parameters are pointing to the correct addresses.
(2) Make sure that Kerberos Authentication Protocol is used on the NT Domain server.
I have found that and application called KerbTray has been very useful in providing useful information. This program allows you to view the Credential Information stored in the Credentials Cache. This application can be found at the Microsoft site.
For further reference.. check out the information on :
http://java.sun.com/j2se/1.4/docs/guide/security/jgss/tutorials/AcnOnly.html
Goodluck.