Skip to main content
jbird5k
jbird5k
Inspiring
February 9, 2011
Question

How do I create a kerberos ticket using coldfusion

  • February 9, 2011
  • 2 replies
  • 1983 views

I have 3 apps on our intra net that require authentication and would like to use kerberos to accomplish this. This is my set up.

users log in to the network and authenticate via active directory (all windows based) , Our web apps are on a box running solaris 10, weblogic app server, cf 9 and oracle 11g.  A group of our web apps on this sever require users to authenticate through oracle (not the web / app server).

I can authenticate with kerberos via a putty session on the server with no problems.

USEING COLDFUSION, how do i request a kerberos ticket and pass the necessary credentials to authenticate.?

can this be done.?

I am looking for a CODE SAMPLE OF HOW DO THIS IN A UNIX environment  NOT WINDOWS.

I appologize for the frustrated tone of this post. However, after a week of reading documentation til my eyes bleed, to end up chasing my tail with no truly help info............

TIA

JB

This topic has been closed for replies.

2 replies

M
mack_
Participating Frequently
February 11, 2011

What you actually need is for the web server to support kerberos

authentication, in this case apache. ColdFusion will read the

authenticated user name from the CGI scope when the user is

authenticated (the name of the variable is in the apache module

documentation).

--

Mack

D
Community Expert
Dave WattsCommunity Expert
Community Expert
February 10, 2011

This is something your web server should do, not CF. Configure your web server to participate in the Kerberos realm. If WebLogic is the web server (and not just the application server) configure that:

http://download.oracle.com/docs/cd/E13222_01/wls/docs81/secmanage/sso.html

If you have WebLogic configured to use Apache as a web server, configure that:

http://modauthkerb.sourceforge.net/

http://support.microsoft.com/kb/555092

Dave Watts, CTO, Fig Leaf Software

http://www.figleaf.com/

http://training.figleaf.com/

Dave Watts, Eidolon LLC
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices