Re: Using kerberos + s4u2self/s4u2proxy + apache http client

[Marc Boorshtein]

>
> After you have successfully impersonated the user principal, perform your
HTTP request in a PriviledgedAction with Subject#doAs. That should do.
>
Thanks Micahael. Ill give this a try. Which kerberos server did you try
this against?  I tried using another example with red hats ipa (I think
it's built on MIT kerberos) and it didn't like the response tickets from
the kdc since there were no flags being set.