[EMAIL PROTECTED] wrote: > I've read the wiki on the CAS Spnego configuration found here > > http://www.ja-sig.org/wiki/display/CASUM/SPNEGO > > I'm trying to configure the CAS on a windows server machine. What i > don't understand from the wiki is where I have to put the file > myspnaccount.keytab on windows CAS server. The only references to this > file are for testing Kerberos from bash command line. Seems that is not > necessary on windows, isn't it?
You don't need the keytab file and file krb5.conf at all if you configure the service account's password in file deployerConfigContext.xml (jcifsConfig bean, properties jcifsServicePrincipal and jcifsServicePassword). Note that execution of KTPASS.EXE is also done to set the servicePrincipalName in the service account's AD entry. See also: http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/KerberosReq.html Ciao, Michael. _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
