23 Jan
2013
23 Jan
'13
9:40 p.m.
Hi,
I'm trying to set up XWiki in a network with a PostgreSQL database that
uses kerberos for authentication.
I know it is possible to control the authentication mechanism used by
the JDBC driver using login.conf. For example, the following simple
program accesses a postgresql database:
import java.sql.*;
import java.util.*;
import org.postgresql.Driver;
class Test {
public static void main(String... args) throws Exception {
Properties props = new Properties();
props.setProperty("loglevel", "2");
props.setProperty("user", "xwiki");
props.setProperty("ssl", "true");
Connection conn =
DriverManager.getConnection("jdbc:postgresql://db.example.com:5432/xwiki",
props);
}
}
It can be made to use a kerberos keytab by passing
-Djava.security.auth.login.config=login.conf, with the following
login.conf file:
pgjdbc {
com.sun.security.auth.module.Krb5LoginModule required useKeyTab=true
keyTab=xwiki.keytab principal=xwiki storeKey=true doNotPrompt=true;
};
(pgjdbc is apparently the default application name for the postgresql
driver)
I want to do something similar with the xwiki installation (running
inside tomcat 7).
1) Is there some reason this cannot be done?
2) What is the application name I need to give in login.conf for this to
work properly?
Thanks,
Eric