Extract Information from Ticket.

Hi, I have a Kerberos Ticket like follows (The Ticket is passed from Apache mod_kerb by request header): YIIGHAYGKwYBBQUCoIIGEDCCBgygMDAuBgkqhkiC9xIBAgIGCSqGSIb3EgECAgYKKoZIhvcSAQICAwYKKwYBBAGCNwICCqKCBdYEggXSYIIFzgYJKoZIhvcSAQICAQBuggW9MIIFuaADAgEFoQMCAQ6iBwMFACCjggThYYIE3TCCBNmgAwIBBaETGxF

RE: Extract Information from Ticket.

Hi, > Does anybody know how I can extract Principal and other Information from that > Ticket in Java? You can do it using the jcifs AND the jcifs-ext library - look at the spnego classes and http negotiation filter etc.. Cheers, Bruce -- No virus found in this outgoing message. Checked by AV

Re: What version next?

Quoting Ken Raeburn <[EMAIL PROTECTED]>: > including preauthentication and KDC location determination What does this mean/do? > Client-side support for server name referrals, > if you're using a Microsoft KDC. SPNEGO support in GSSAPI. Is this going to make it easier (in exactly what way) to u

Re: What version next?

Quoting Sam Hartman <[EMAIL PROTECTED]>: > because the referrals support in 1.6 will eventually be useful to > you. Referrals support? Is that like the referrals in LDAP terms? Kerberos mailing list Kerberos@mit.edu https://mailman.mit.ed

Re: Extract Information from Ticket.

On Fri, 2 Mar 2007 13:58:40 +0200 "Bruce Stewart" <[EMAIL PROTECTED]> wrote: > Hi, > > > Does anybody know how I can extract Principal and other Information from > > that Ticket in Java? Are you sure mod_auth_kerb doesn't put the principal name somewhere (e.g. REMOTE_USER)? Otherwise you have

R: Multiple AD domains and MIT Kerberos

Hello, We have a situation where we are trying to get AIX Kerberos to interoperate with Microsoft w2k3 AD 4-domain forest. The challenge is to get the krb5.conf configuration to allow for the SPN to be registered in an account that is not in the root domain of the forest. Example- Forest- Exa

Ad password sync to linux

Hi I have reada forumon the net about you guystrying tosend password changes to Ad from Linuxbox with Kerberos. I would love it if you guys had a solution that would be able to send AD password changes\syncs to a Linux box. We would l

Re: R: Multiple AD domains and MIT Kerberos

if the host name is host.example.com and the service principal is http/[EMAIL PROTECTED] then the domain realm entry for host.example.com should be SUBDOM.DOM2.EXAMPLE.COM Jeffrey Altman Secure Endpoints Inc. Eric Schwarz wrote: > Hello, > > We have a situation where we are trying to get AIX Ker