Search code examples
javaauthenticationkerberosjdbcrealmgssapi

Kerbtray realm and kdc for java gss-api

I'm using kerbtray.exe on Win7.

How do I know exactly what the realm and kdc is for a java gss-api login?

Solution

  • You are probably referring to the krb5.ini maintenance, right? You should start with the realm your process is logged in to. If you plan to do cross-realm, you have to add every realm which you want to authenticate to and eventually your root realm. If you are unsure, you can look it up with DNS:

    $host -t SRV _kerberos._tcp.<you realm>

    and

    $host -t SRV _kerberos._udp.<you realm>

    See here for reference.