Keep Your Secrets Secret - Kerberos in Java
summary
Explains how to get Kerberos working in Java by using GSS-API + JAAS login module to obtain and export service tickets, shows using kinit/klist/ktab and an embedded Apache Kerby KDC for tests, and warns of practical traps: clock skew > five minutes breaks auth, KDC is a single point of failure, tickets often expire after ~10 hours. Builds a Hazelcast demo that uses a custom JAAS login module to accept GSS tokens and it runs successfully — data persists across client restarts.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:54Kerberos Basics
- 2:03Basics Kerberos
- 4:22What Can Cause Problem in Kerberos Protocol
- 17:55Kdc in Java
- 37:46Kerberos and Java on Windows
- 42:29The Difference between Kerberos and Tls Kerberos
- 48:09Client Code
- 51:27Login Module
related talks
46mBack to the Roots of Single Sign-On: Kerberos
51mAbusing Microsoft Kerberos: Sorry You Guys Don't Get It
40mMaximizing Security with JDK: Understanding Built-in Capabilities
50mWatching The Watchdog: Protecting Kerberos Authentication With Network Monitoring
34mUnlocking the unknowns: Cryptography Essentials
30mAre we using Java Crypto API Securely ?
41mKafka Security - A brief overview of its history ... #bbuzz
32mReal Security for Services on Kubernetes [I]