[CXF-5748] Improve WS-Security Kerberos configuration

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.7.11, 3.0
• Fix Version/s: 2.7.12, 3.0.1
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 19/May/14 11:44
• Updated: 16/Feb/15 16:09
• Resolved: 19/May/14 13:38

Description

Configuring Kerberos with WS-Security is currently a bit more cumbersome than it needs to be on the client side. The user must create a KerberosClient Object, set the JAAS Context + service name / CallbackHandler on it, and set it as a JAX-WS property.

For Spnego on the other hand, we can simply use the "ws-security.kerberos.jaas.context", "ws-security.kerberos.spn" and standard "ws-security.callback-handler" properties. This task is to allow this when working with Kerberos as well.