Kerberos authentication against FreeIPA - FAST Tunnel support

[Prashant Bapat]

>> Do you have any reason to believe the Java implementation of Kerberos
supports that?

No. Just wanted to confirm if it does or does not.

>> I doubt you can, short of writing your own code to invoke native code to
get around the above issue.

Are there any pointers? Is there an example code?

On 2 March 2016 at 19:30, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > FreeIPA uses a Kerberos FAST tunnel for OTP authentication
> > (https://tools.ietf.org/html/rfc6113). From the command line, running
> kinit
> > fails. We need to run kinit with -T option (armor credential cache).
>
> Do you have any reason to believe the Java implementation of Kerberos
> supports that?
>
> > How to get this working with Shibboleth IdP ? Any help is appreciated.
>
> I doubt you can, short of writing your own code to invoke native code to
> get around the above issue.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160302/636f7c82/attachment-0001.html>