Delegating kerberos credentials using S4U2proxy Microsoft extensions
Microsoft AD provides some extensions over the kerberos protocol to make a webserver (JBOSS in our case) to delegate or impersonate the credentials of a user. There are two extensions called S4U (Server for User):
- The Server-for-User-to-Self (S4U2self) extension is intended to be used when the user au...
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
