Tim Mc Laughlin wrote:
> The user that Tomcat runs as isn't in the domain
> -- does that matter?

Tomcat has to get access to the server keytab.

BTW: I didn't go the route with /etc/krb5.conf. I rather configured the 
service user and the password in deployerConfigContext.xml and let CAS 
do the Kerberos pre-authc.

Ciao, Michael.
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to