[CONNECTORS-1103] Add Kerberos support for all connectors that currently use NTLM

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: ManifoldCF 1.7.2
• Fix Version/s: ManifoldCF next
• Component/s: FileNet connector, LiveLink connector, RSS connector, SharePoint connector, Web connector
• Assignee: Karl Wright
• Reporter: Karl Wright
• Created: 14/Nov/14 18:59
• Updated: 16/Feb/19 20:01

Description

You can solve your local ticket store by using LoginContext and appropriate keytabs. Obtain the GSSCredential and go. Every connection instance can act independently. Regardless of the OS.

If you cache the subject issued by the aforementioned LoginContext, you can always say: GssCredential#getRemainingLifetime or invoke a fresh LoginContext as you think fit.

Unfortunately, HTTPClient does not support direct use of GSSCredential and always assumes implicit credential. Fortunately, there are several ways to solve that problem too.

Issue Links

• requires: HTTPCLIENT-1625 Completely overhaul GSS-API-based authentication backend