Michael Böckling
Michael Böckling

Reputation: 7872

How to show tickets used by Java Kerberos enabled applications

I have a Java app running in Tomcat under Windows that offers Kerberos authentication and uses the JVM GSS-API implementation.

I'd like to take a look at the tickets obtained by the app, but it seems the (native) Windows klist tool and the Java klist tool don't show them.

The user the app is running under has no krb5cc* file in its home dir, so I'm stuck.

Is there a way to look at the tickets?

Upvotes: 1

Views: 1251

Answers (1)

Michael-O
Michael-O

Reputation: 18405

Java's not writing service tickets back to the native credential cache whether it's Windows or Unix. It stores tickets in the private subject only.

Upvotes: 2

Related Questions