search

rwinch / spring-ldap

Apache License 2.0
0 stars 0 forks source link

LDAP-297: Kerberos support for ContextSource #5

Open rwinch opened 10 years ago

rwinch commented 10 years ago

Original Reporter: rwinch Environment: Not Specified Version: Not Specified Migrated From: https://jira.spring.io//browse/LDAP-297

rwinch commented 9 years ago

michael-o said: I have a custom implementation working for years. Anyone interested?

rwinch commented 9 years ago

rwinch said: Thanks! We would love to get a Pull Request and include it in the distribution!

rwinch commented 9 years ago

michael-o said: Yay, did not notice your response. I need to upgrade the code to Spring LDAP 2.0 and will make this avaiable after that.

rwinch commented 9 years ago

rwinch said: Since I commented, you might find what you need in Spring Security Kerberos http://docs.spring.io/spring-security-kerberos/docs/1.0.0.RC2/reference/htmlsingle/#ssk-kerberosldap

rwinch commented 9 years ago

michael-o said: Thanks Rob, I quickly scanned the example and this is something I won't be using because it does not separate interface from implementation:

  1. This is tied to Oracle VM
  2. You have to writer another class for another VM vendor
  3. You are going to duplicate all of Krb5LoginModules parameters.
  4. You always require a keytab which is not always the case.

A cleaner approach is always to use a login entry name and provide the login.conf file. VM and config agonistic. [This|http://dirctxsrc.sourceforge.net] is what I use in an adapted fashion for Spring LDAP.