geos_one/CASA
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Added a retry limit for dealing with communication exceptions.

Browse Source 
Updated the README to reflect the new mechanism info changes for
the Krb5 and Pwd authentication mechanisms.
This commit is contained in:
Juan Carlos Luciani
2007-03-21 22:15:35 +00:00
parent 0eda6a0830
commit 65a6c74d20
5 changed files with 23 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
CASA-auth-token/server-java/Svc/README
View File

@@ -184,12 +184,12 @@ The following is an example auth.policy file:
<auth_source>
<realm>CorpTree</realm>
<mechanism>Krb5Authenticate</mechanism>
<mechanism_info>host/tokenserver.company.novell.com@KRB_REALM</mechanism_info>
<mechanism_info>SVC_PRINCIPAL=host/tokenserver.company.novell.com@KRB_REALM</mechanism_info>
</auth_source>
<auth_source>
<realm>CorpTree</realm>
<mechanism>PwdAuthenticate</mechanism>
<mechanism_info></mechanism_info>
<mechanism_info>REALM_CREDENTIALS_ONLY=true</mechanism_info>
</auth_source>
</auth_policy>
@@ -212,10 +212,16 @@ Note the following about the sample auth.policy file:
- The name of the Krb5 Authentication mechanism is "Krb5Authenticate". This mechanism
defaults the service principal name to host/hostname@KERBEROS_REALM. You can use a
different service principal name under the mechanism_info key.
different service principal name by setting the SVC_PRINCIPAL setting equal to it
under the mechanism_info key. Notice that mechanism info settings for this mechanism
are separated using a semicolon and no-white space is allowed.
- The name of the username/password authentication mechanism is "PwdAuthenticate" and
it does not require any information to be included under the mechanism_info key.
it does not require any information to be included under the mechanism_info key. You
can specify to the client to only utilize credentials for the specified realm by
setting the mechanism info setting REALM_CREDENTIALS_ONLY equal to "true". Notice that
mechanism info settings for this mechanism are separated using a semicolon and no-white
space is allowed.
The authtoken.settings file contains settings that should be applied to authentication
tokens issued to authenticate to the service.