[DIRSERVER-1889] Credentials cache for Kerberos

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M16
• Assignee: Unassigned
• Reporter: Kai Zheng
• Created: 21/Aug/13 17:04
• Updated: 09/Sep/13 12:55
• Resolved: 09/Sep/13 08:14

Description

As discussed in the developers list, it’s good to provide credentials cache support for ApacheDS Kerberos. Currently this functionality isn’t available, as confirmed by Kiran. It’s needed to implement Kerberos client tools like kinit to be complete for the ApacheDS Kerberos solution in future. And also, in Kerberos automation testing systems utilizing the built-in KDC in ApacheDS, to allow test of user login via kinit or ticket cache, such facility is also needed to store TGT in a FCC compatible cache, and from the cache the TGT can be loaded by thirdparty tools and libraries. Ref. HADOOP-9893. This issue will define the API and provide implementation for credentials cache as client library. Such library can be utilized to implement kinit like tools in future.

Issue Links

• is depended upon by: HADOOP-9893 Ticket cache support for MiniKdc