Delegating kerberos credentials using S4U2proxy Microsoft extensions
Updated -
Microsoft AD provides some extensions over the kerberos protocol to make a webserver (JBOSS in our case) to delegate or impersonate the credentials of a user. There are two extensions called S4U (Server for User):
- The Server-for-User-to-Self (S...
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.