为对广告的Windows身份验证的Java程序（的Kerberos） [英] Java process for authentication on Windows against AD (kerberos)

问题描述

我知道我可以调用到Active Directory和不提供查询我有一个明文的用户名和密码。 （我不想这样做）

I'm aware I can call out to Active Directory and do queries provided I have a cleartext username and password. (I don't want to do that)

在VB中，我可以设置权限级别由NT组 - 并且用户不必输入密码也不行，它保存在一个文本文件中。 （我的理解是，这已经访问Windows AD票）。

In VB, I can set authorisation levels by NT group - and the user doesn't have to enter their password nor, store it in a text file. (My understanding is that this has access to the Windows AD ticket).

我怎样才能从用户的Kerberos票证登录会话窗口？ （不要求用户名和密码）。

How can I get the kerberos ticket from the user's logged in session in windows? (without asking for a username and password).

这似乎那里： <一href="http://stackoverflow.com/questions/1431999/java-and-kerberos-authentication-krb5-conf-versus-system-setproperty">Java和Kerberos身份验证的krb5.conf与System.setProperty 但没有得到门票。

This appears to get there: Java and Kerberos authentication krb5.conf versus System.setProperty But doesn't get the ticket.

（这是开始听起来像我将不得不调用Win32 API与JNA获得Kerberos票据 - 我希望有一个更简单的方法）

(It is beginning to sound like I'll have to call the Win32 API with JNA to get the kerberos ticket - I'm hoping there is a simpler way.)

推荐答案

您应该的这个的之一。它会引导你一步步地获得服务票证特定服务器。要注意的是在客户机和账号有域的一部分。

You should start with this one. It will guide your through the steps to obtain a service ticket for a specific server. Beware that the client machine and account have to part of the domain.

这篇关于为对广告的Windows身份验证的Java程序（的Kerberos）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！