Cross Realm Authentication using NEGOTIATE protocol (SPNEGO)
843810Mar 17 2008 — edited Feb 28 2010Hi,
I'm running JBoss that has:
1. NegotiateAuthenticator - converses with the browser via NEGOTIATE authentication protocol to obtain a GSSAPI Token (containing a Kerberos Service Ticket).
2. KerberosLoginModule - which uses Sun's GSSAPI implementation for Kerberos 5, to validate the Service Ticket.
Currently JBoss is registered as a service in our domain, and everything is working properly.
The problem arises when I wish to authenticate a user from another DOMAIN (on another Active Directory).
Does anyone have a clue on how to this?
Asaf