WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  SPNEGO Fallback in WAS 7

    Posted 07/12/12 11:38 AM
    I've enabled SPNEGO on WAS 7.0.0.11. The SPNEGO itself is working ok, but I want to make Kerberos mandatory and can't.

    My SPNEGO config is listed as follows - with allowAppAuthMethodFallback false.

    wsadmin>AdminTask.showSpnego()
    '[[OID oid:1.3.6.1.5.5.2] [isCredentialForwardable false] [authContextImplClass com.ibm.ws.security.spnego.TrustAssociationInterceptorImpl] [authConfig ] [simpleAuthConfig ] [authValidationConfig ] [enabled true] [allowAppAuthMethodFallback false] [trustAssociation ] [singleSignon ] [properties ] [digestAuthentication ] [filters (cells/app|security.xml#Filter_1342053578202)] [_Websphere_Config_Data_Id cells/app|security.xml#SPNEGO_1] [_Websphere_Config_Data_Type SPNEGO] [_Websphere_Config_Data_Version ] [krb5Config /opt/app/certificates/krb5.ini] [krb5Keytab /opt/app/certificates/krb5.keytab] [dynamicReload false] ]'

    But I keep getting the following in System Out:
    [7/12/12 12:36:02:212 UTC] 0000003b TrustAssociat I com.ibm.ws.security.spnego.TrustAssociationInterceptorImpl initialize CWSPN0006I: SPNEGO Trust Association Interceptor initialization is complete. Configuration follows:
            SPNEGO Web Authentication:
            enabled = true
            dynamically update = false
            allowAppAuthMethodFallback = true
    ..."window.parent.tinyMCE.get('post_content').onLoad.dispatch();" contenteditable="true" />

    Does anyone know how to set allowAppAuthMethodFallback?

    Thanks


  • 2.  SPNEGO Fallback in WAS 7

    Posted 07/13/12 05:00 AM
    Hi GJenkins,

      in this thread you have some documents to implement SPNEGO:

      Question_about_Single_Sign-On_(SSO)_using_SPNEGO_for_WAS_v7
     
      Hope this helps,

    regards


Related Content