Relative path for JAAS keytab configuration

问题:

I have a system wherein .NET clients authenticate against a Java server with Kerberos. Everything works, but I'm trying to improve the server configuration. Currently a keytab file is required in the root of C:\ because my jaas.conf looks like this:

Server {
    com.sun.security.auth.module.Krb5LoginModule required
    useKeyTab=true
    storeKey=true
    isInitiator=false
    keyTab="///C:/keytab"
    principal="XXX";
};

I am trying to make the keyTab property a relative path, but am having no luck. What I've tried:

• keyTab="///keytab"
• keyTab="///./keytab"
• keyTab="classpath:keytab"

All of these result in an exception, so clearly the keytab file cannot be found.

I've searched and read the docs and banged my head on a wall over this. Can anyone reveal the magical incantation I need to make this happen?

回答1:

Please use keyTab="keytab" Similar to the example: http://docs.oracle.com/javase/6/docs/technotes/guides/security/jgss/lab/part1.html