2.2.3. Kerberos

2.2.3. Kerberos

Kerberos authentication, or Microsoft Active Directory authentication, is supported by Symbolic and could be simply configured modding some properties on your configuration file.

login.usekerberos = true
login.krb.realm = KERBEROS.REALM
login.krb.kdc = 192.168.0.1
If you have planned to use Symbolic on your preferred application server, the kerberos authentication will be delegated to your application setting. In this case you need to set parameters also in your application server (in Symbolic configuration you can just enable kerberos setting true on the correct property). For example in jboss application server, inside your instance's conf folder (ex. server/default/conf) you can find a file named login-config.xml, ehere you need to insert
<policy>
   ....
   <application-policy name="SymbolicApp">
      <authentication>
        <login-module code="com.sun.security.auth.module.Krb5LoginModule" flag="required">
          <module-option name="java.security.krb5.realm">your kerberos realm</module-option>
          <module-option name="java.security.krb5.kdc">kerberos server address</module-option>
        </login-module>
      </authentication>
    </application-policy>
   ...
</policy>
Now, when you try to login, Jboss will call kerberos server for the atuhentication with provided credentials and then send Authentication Token to Symbolic to proceed with login operations.