You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by Karl Wright <da...@gmail.com> on 2013/01/07 11:16:29 UTC
Kerberos support/krb5.ini file
Hi all,
Does anyone have insight as to why Kerberos support is written to
require krb5.ini, rather than including krb5.ini access as an
implementation of an abstract in-memory way of providing tickets?
This seems out of character with the rest of HttpComponents.
Thanks in advance,
Karl
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
Re: Kerberos support/krb5.ini file
Posted by Karl Wright <da...@gmail.com>.
Perhaps someone should complain to Oracle. ;-)
But I agree nothing can be done at the moment.
Karl
On Mon, Jan 7, 2013 at 6:26 AM, Oleg Kalnichevski <ol...@apache.org> wrote:
> On Mon, 2013-01-07 at 05:16 -0500, Karl Wright wrote:
>> Hi all,
>>
>> Does anyone have insight as to why Kerberos support is written to
>> require krb5.ini, rather than including krb5.ini access as an
>> implementation of an abstract in-memory way of providing tickets?
>> This seems out of character with the rest of HttpComponents.
>>
>> Thanks in advance,
>> Karl
>>
>
> Karl
>
> HttpClient relies on the GSS-API provided by JRE for Kerberos and SPNego
> authentication. The krb5.ini configuration file is used by JRE and there
> is not much we can do about it.
>
> http://docs.oracle.com/javase/1.5.0/docs/guide/security/jgss/tutorials/KerberosReq.html
>
> Oleg
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
> For additional commands, e-mail: dev-help@hc.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
Re: Kerberos support/krb5.ini file
Posted by Oleg Kalnichevski <ol...@apache.org>.
On Mon, 2013-01-07 at 05:16 -0500, Karl Wright wrote:
> Hi all,
>
> Does anyone have insight as to why Kerberos support is written to
> require krb5.ini, rather than including krb5.ini access as an
> implementation of an abstract in-memory way of providing tickets?
> This seems out of character with the rest of HttpComponents.
>
> Thanks in advance,
> Karl
>
Karl
HttpClient relies on the GSS-API provided by JRE for Kerberos and SPNego
authentication. The krb5.ini configuration file is used by JRE and there
is not much we can do about it.
http://docs.oracle.com/javase/1.5.0/docs/guide/security/jgss/tutorials/KerberosReq.html
Oleg
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org