RE: JWT pre-authentication - get JWT token on service side

2016-06-23 Thread Zheng, Kai
I see. Why you want to validate it using GSS on the client side? Because the client gets it and then should just trust it, right? To validate a service ticket needs the service key or keytab, which is why I thought it could be on the server side. I got your scenario. Are you able to obtain the

RE: JWT pre-authentication - get JWT token on service side

2016-06-23 Thread Zheng, Kai
Hi Colm, Yes you’re right. The login module assumes some ones don’t want to touch the low level, but if otherwise like you, using the Kerby library directly should also work having the most flexibility. >> How do I extract the token from SgtTicket that I can validate using GSS? Sorry, but

Re: JWT pre-authentication - get JWT token on service side

2016-06-23 Thread Colm O hEigeartaigh
Hi Kai, On Wed, Jun 22, 2016 at 3:11 PM, Zheng, Kai wrote: > > About AuthzToken type, sorry it's my mistake. I actually meant AdToken and > please look at the comment in the class header in AdToken.java. Thanks to > Emmanuel, the comment put there is much nice to understand