Wednesday 4 February 2009

Kerberos java 5 DES Krb5LoginModule

I am trying to configure CRM application to use Kerberos Authentication. The CRM application is currently supported on JRE 1.5. I was able to configure Kerberos using Sun’s login module implementation Krb5LoginModule.


Kerberos login module implementation by sun is Krb5LoginModule. Krb5LoginModule in java 5 supports DES and Triple DES but infrastructure team wants AES 256. The Ciphers in JCA of java 1.5 support AES, Therefore if I want to use Kerberos Authentication in java 1.5 with AD accounts that have AES encryption i need to implement my own login module interface.

Java 5 supporting DES

Triple DES http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/jgss-tiger.html


Cipher in JAVA 5 http://java.sun.com/j2se/1.5.0/docs/guide/security/CryptoSpec.html#CipherClass

No comments: