Active Directory Kerberos and SASL

[valyo]

Hello,

I am trying to create a connection to AD with Kerberso5
authentication. I am using com.ibm.di.LDAPConnector with SASL
authentication. After filling the aditional parameters with:

java.naming.security.authentication:GSSAPI

The connector searches for c:\windows\krb5.ini
After providing this file, with the configuration for the kereberso
server in it the LDAP connector says the it can't find JAAS subject. I
have created also a jaas.cfg configuration file with the kerberso
login module in it and I have set the location of the file in the
global properties: java.security.auth.login.config, but the connector
still says: jaas subject missing

I have tested the authentication with a stanalone java application
with jaas.cfg and krb5.ini and the connection is successfull, so the
configuration files are ok.
The documentation about this how to authenticate using SASL is
missing. The only thing that is said is thet you must set the
additional parameters.
I will appreciate any help.
Thanks in advance.

[Eddie Hartman]

Please open a PMR with our support on this - and then post your
answer! I have very little Kerberos experience (apart from the SPNEGO
stuff for Domino, which is just data migration/sync anyway). It would
great to learn something new :)

Support mail: ib...@us.ibm.com, or use your partner or client portal
page to do this.

Thanks,
-Eddie