You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Keith Brown <ke...@gmail.com> on 2017/10/27 00:54:47 UTC
catalina.authentication
In my log file, I keep seeing Unable to login as service principal. (kerberos).
I followed these instructions:
https://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html
here is what I did:
I created a DNS entry for my intranet server. "pluto"
Ask my NT admin to create me a domain user (web_user)
Have the Admin create a service principal name HTTP/pluto.site.org
She created a keytab file for me.
in ../Catalina/localhost/app.xml
I put
<Context>
<Valve classname="org.apache.catalina.authenticator.SpnegoAuthenticator />
<Realm classname="org.apache.catalina.realm.JAASRealm"
allRolesMode="authOnly" />
</Context>
In my WEB-INF/web.xml
Added <login-config> <auth-method>SPNEGO</auth-method> </login-config>
And put some security-constraints.
I restrated tomccat (version 8). And i see this message.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org