How to use gssapi in java applet?

2006-09-29 Thread lizhong
I want to use the vnc applet client ,and need to modify the source code for kerberos authentication and data encryption. So I want the applet to be as easy to use as possible, and I hope no local file would be used in this process(for applet cannot visite local files without changing the

Error in client with kerberos and SAP SSO

2006-09-29 Thread Raunitschke, Sascha
Hi@ Juan Manuel Sestelo, I'm very interested if you have solved the problem Error in client with kerberos and SAP SSO. I have exactly the same problem as you have reported in this forum and I wonder if you can provide me the solution. Problem description: Hi, I have implemented an SSO

RE: API help with ticket expiry

2006-09-29 Thread Keagle, Chuck
If the Credential is available, I'm trying to figure how long it will be before it expires. I'm not counting on magic. Just looking at, if I already have a Credential, I might not have to generate a new one. Maybe the klist source will show me what needs to be done. If you don't have a

Re: Getting TGTs non-interactively

2006-09-29 Thread Jeffrey Altman
Russ Allbery wrote: Fredrik Tolf [EMAIL PROTECTED] writes: See, there are a lot of places where one would like to obtain a ticket non-interactively. Apart from such places as cron, where there's obviously no other choice than to store the key in a keytab, there is the problem with SSH

Re: API help with ticket expiry

2006-09-29 Thread Douglas E. Engert
Keagle, Chuck wrote: If the Credential is available, I'm trying to figure how long it will be before it expires. I'm not counting on magic. Just looking at, if I already have a Credential, I might not have to generate a new one. Maybe the klist source will show me what needs to be

Re: API help with ticket expiry

2006-09-29 Thread Ken Hornstein
If the Credential is available, I'm trying to figure how long it will be be fore it expires. I'm not counting on magic. Just looking at, if I already have a Credential, I might not have to generate a new one. But ... the existing APIs already give you that (the ones I talked about). I have to

RE: Error in client with kerberos and SAP SSO

2006-09-29 Thread Tim Alsop
Hi, I recommend that you report this to SAP, since you are using the SAP supplied SSPI wrapper library (gsskrb5.dll), which is displaying this error. The error means that the SAP gss library was unable to find any Kerberos ticket in the Microsoft credentials cache for the given user principal

RE: API help with ticket expiry

2006-09-29 Thread Keagle, Chuck
Maybe a more detailed explanation is necessary here. We managed a 24x7 set of Batch Queuing Servers. We have thousands of users. Users often work under project deadlines and stack-up the Batch Queuing Manager with many jobs. Once, the number of jobs hit 250,000. We are moving toward Kerberos

1.3 and 1.4 kdc interoperability

2006-09-29 Thread Wesley Chow
Will a 1.4.x master KDC push properly to a 1.3.x slave KDC? We run KDCs on Debian sarge right now, but we're migrating to Ubuntu dapper. Being able to support a mix of KDCs during a transitional period would be nice. Thanks, Wes Kerberos