Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-8552

Add support for GSSKerberosCredential in ElytronSubjectFactory

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Major
    • 11.0.0.Beta1
    • 11.0.0.Alpha1
    • JCA, Security
    • None

    Description

      The JCA ElytronSubjectFactory must be improved to handle GSSKerberosCredentials to enable kerberos based authentication for databases.

      It should use a CredentialCallback of type GSSKerberosCredential to obtain the GSSCredential and associated KerberosTicket when building the Subject that is used to establish the connections to the DB. If the authentication configuration matched by the configured authentication context references a kerberos security factory, this factory will be used to create the credential and ticket that will in turn be inserted into the constructed Subject instance.

      Attachments

        Activity

          People

            sguilhen Stefan Guilhen
            sguilhen Stefan Guilhen
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: