Simple Kerberos client in Java?

by

There is now a simple solution for this using the Apache HTTP Components Client 4.5 or greater. This is still marked as experimental in 4.5 so your milage may vary, but this is working fine for me in an enterprise context.

In addition to the HC 4.5 client jars you will need to have the httpclient-win, jna and jna-platform jars on your classpath, as provided with http-component-client. You then construct a Kerberos enabled HC-client as follows:

CloseableHttpClient httpclient = WinHttpClients.createDefault();

Or using the builder:

HttpClientBuilder clientBuilder = WinHttpClients.custom();

Which can then be customised as required before building the client:

CloseableHttpClient client = clientBuilder.build();

This solution works without any external configuration, and most importantly solves the issue where the in-built JRE mechanism breaks for users with local Admin rights on Windows 7+. This is possible because the Kerberos ticket is being retrieved directly from the SSPI API via JNA, rather than going through the GSSAPI provided by the JRE.

Example code from the http-components team

This was all made possible by the good work of Daniel Doubrovkine Timothy Wall
 and Ryan McKinley

More Related Contents:

  1. Should I call ugi.checkTGTAndReloginFromKeytab() before every action on hadoop?
  2. “Defective token detected” error (NTLM not Kerberos) with Kerberos/Spring Security/IE/Active Directory
  3. Java SPNEGO Authentication & Kerberos Constrained Delegation (KCD) to backend service
  4. Skipping Kerberos authentication prompts with JSch [duplicate]
  5. How to connect with Java into Active Directory
  6. What is a JavaBean exactly?
  7. Add image thumbnails to a layout in a grid?
  8. How to handle windows file upload using Selenium WebDriver?
  9. Getting java.sql.SQLException: Operation not allowed after ResultSet closed
  10. Variable length (Dynamic) Arrays in Java
  11. Signing PDFs on a server document using a signature from the user
  12. Modifying a file inside a jar
  13. Connecting an input stream to an outputstream
  14. Cannot find firefox binary in PATH. Make sure firefox is installed
  15. Can we write our own iterator in Java?
  16. Is there a way to automatically generate getters and setters in Eclipse?
  17. Is there a sophisticated file system monitor for Java which is freeware or open source? [closed]
  18. JSP generating Excel spreadsheet (XLS) to download
  19. Recursive ConcurrentHashMap.computeIfAbsent() call never terminates. Bug or “feature”?
  20. Converting longitude/latitude to X/Y coordinate
  21. jTextArea as IO console
  22. Could not commit JPA transaction: Transaction marked as rollbackOnly
  23. In Java, how to find if first character in a string is upper case without regex
  24. Do Java 8 default methods break source compatibility?
  25. JPA: what is the proper pattern for iterating over large result sets?
  26. Selenium Webdriver – Stale element exception when clicking on multiple dropdowns while HTML DOM doesn’t change
  27. JDK = Java SE && JDK != Java EE?
  28. How to remove error Picked up _JAVA_OPTIONS: -Xmx512M?
  29. How do I compare two Integers? [duplicate]
  30. print current date in java

Leave a Comment