So these features haven't made it into a release yet? Is there an easier way to set this up without the constrained delegation?
--- On Fri, 10/2/09, Luke Howard <[email protected]> wrote: From: Luke Howard <[email protected]> Subject: Re: Proxy authentication To: "Nigel Benns" <[email protected]> Cc: [email protected] Received: Friday, October 2, 2009, 3:49 PM > I am using Solaris 10 for both the apache server and weblogic server. > Weblogic version is 10.1. > We are using Windows 2003 AD for the KDC and I have given the apache server's > service account delegation ability to the weblogic servers HTTP service > principal. This (the fact that you have configured a specific principal to delegate to) is constrained delegation, you'll need libgssapi_krb5/libkrb5 from trunk for this. -- Luke ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
