Home/ Questions/Q 3800866
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-19T13:57:35+00:00

Is there an apache module that implements Kerberos authentication for use by Tomcat and

  • 0

Is there an apache module that implements Kerberos authentication for use by Tomcat and also supports Kerberos delegation?

I’ve already looked at mod_spnego and it throws away the SSPI context it creates only keeping the principal name. Instead, I’m looking for a module that would allow for the delegation of the ticket sent to Tomcat – that is, taking the service ticket sent for authentication and using it server side to access another service on behalf of the user.

EDIT: To clarify, I need to impersonate under Win32 using the GSS/SSPI context so when legacy code connects to another server, the delegated credentials are used.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    WAFFLE (Windows Authentication Functional Framework) now provides that feature starting from v1.4beta.

    It provides a ServletFilter that uses native Windows APIs to authenticate the user, either using Basic or Negotiate authentication. The user then can be impersonated, and native APIs calls will be performed with the access token of the impersonated user.

    • 0