sql server - Using Kerberos S4U extensions (introduced in Java 8) to connect to database using JDBC -


it's been while since coded in java, may missing obvious. want connect database (i need support many - sql server, mysql, etc.) via jdbc. however, want use microsoft s4u java extension support added in java 8 achieve kerberos delegation. not want user have enter credentials on middle-tier server. use s4u ticket middle-tier server on user's behalf , use invoke jdbc code via doas functions (subject.doas or doasprivileged).

i have added support protocol transition , constrained delegation on windows using c++ , odbc. don't know how same java. s4u documentation on java sparse. page seems contain information - http://docs.oracle.com/javase/8/docs/technotes/guides/security/jgss/jgss-features.html. page says "a new public method (gsscredential::impersonate) has been added com.sun.security.jgss package implement these extensions." based on http://docs.oracle.com/javase/7/docs/technotes/guides/security/jgss/single-signon.html, thinking need use classes logincontext , subject invoke doas on jdbc connection call connection goes through under subject's credentials. how use gsscredential::impersonate in mix?

thanks, ed

this code arrived @ after lot of spelunking online:

   gssmanager manager = gssmanager.getinstance();    gsscredential self  = manager.createcredential(gsscredential.initiate_only);    gssname user = manager.createname("myuser", gssname.nt_user_name);    gsscredential impcred = ((extendedgsscredential)self).impersonate(user);     subject mysubject = new subject();    mysubject.getprivatecredentials().add(impcred);    privilegedaction action = new clientaction();    subject.doas(mysubject, action);

i "gssexception: failure unspecified @ gss-api level (mechanism level: attempt obtain s4u2self credentials failed!)" on impersonate call, still investigating.


Comments

Post a Comment

Popular posts from this blog

cakephp - simple blog with croogo -

i not problem, made simple blog in croogo, problem is not adding or modifying or delete, because arabic language ?? function add in controller `public function admin_add() { $this->set('title_for_layout', __('add part')); if (!empty($this->request->data)) { $this->part->create(); if ($this->part->save($this->request->data)) { $this->session->setflash(__('the part has been saved'), 'default', array('class' => 'success')); $this->redirect(array('action' => 'index'));//, $this->part->id)); } else { $this->session->setflash(__('the part not saved. please, try again.'), 'default', array('class' => 'error')); } } }` => model `class part extends appmodel { public $name = 'part'; var $belongst...
Read more

How to group boxplot outliers in gnuplot -

i have large set of data points. try plot them boxplot, of outliers exact same value , represented on line beside each other. found how set horizontal distance between outliers in gnuplot boxplot , doesn't much, apparently not possible. is possible group outliers together, print 1 point , print number in brackets beside indicate how many points there are? think make more readable in graph. for information, have 3 boxplots 1 x value , times 6 in 1 graph. using gnuplot 5 , played around pointsize, doesn't reduce distance anymore. hope can help! edit: set terminal pdf set output 'dat.pdf' file0 = 'dat1.dat' file1 = 'dat2.dat' file2 = 'dat3.dat' set pointsize 0.2 set notitle set xlabel 'x' set ylabel 'y' header = system('head -1 '.file0); n = words(header) set xtics ('' 1) set [i=1:n] xtics add (word(header, i) i) set style data boxplot plot file0 using (1-0.25):1:(0.2) boxplot lw 2 lc rgb '#8b0000...
Read more

bash - Performing variable substitution in a string -

i have string contains use of variable, , i'd substitute variable's value string. right best have is #!/bin/bash foo='$name; echo bar' name="the name" expanded="$(eval echo "$foo")" echo "$expanded" which has obvious defects: prints the name bar while i'd print the name; echo bar instead of eval can bash's regex matching bash's string replacement: foo='$name; echo bar' name="the name" [[ "$foo" =~ \$([[:alnum:]]+) ]] && s="${!bash_rematch[1]}" && expanded="${foo/\$${bash_rematch[1]}/$s}" echo "$expanded" name; echo bar
Read more