{"id":666,"date":"2016-01-05T17:28:31","date_gmt":"2016-01-05T23:28:31","guid":{"rendered":"http:\/\/www.thedarktimes.us\/wordpress\/?p=666"},"modified":"2016-01-05T17:28:31","modified_gmt":"2016-01-05T23:28:31","slug":"httpsblogs-oracle-comblogbypuneethentryconfigure_kerberos_with_weblogic_server","status":"publish","type":"post","link":"https:\/\/www.thedarktimes.us\/wordpress\/uncategorized\/httpsblogs-oracle-comblogbypuneethentryconfigure_kerberos_with_weblogic_server\/%20","title":{"rendered":"https:\/\/blogs.oracle.com\/blogbypuneeth\/entry\/configure_kerberos_with_weblogic_server"},"content":{"rendered":"

https:\/\/blogs.oracle.com\/blogbypuneeth\/entry\/configure_kerberos_with_weblogic_server<\/p>\n

Steps to configure Kerberos \/ SPNEGO \/ NTLM authentication with Weblogic Server running on Oracle JDK :<\/h3>\n

By Puneeth-Oracle on Jul 20, 2013<\/a><\/h4>\n
\n

* The AD machine used in this configuration is : \u00a0SLKRBTRN6-01.slkrbtrn6.bea.com ( Windows 2008 R2 )<\/p>\n

* Weblogic Server is on machine : SLKRBTRN6-03. ( Windows XP )<\/p>\n

——-<\/p>\n

Step 1 :<\/strong><\/span><\/p>\n

– Create a new user say, ” wlsclient ” on AD for your Weblogic server instance.<\/p>\n

\"\"<\/a><\/p>\n

Note :<\/strong><\/p>\n

–\u00a0The account type should be “User”, not a “Computer” in the AD.<\/p>\n

– Check password never expires option for the user.<\/p>\n

– DES encryption type is disabled by default on Windows 2008 AD and hence donot check this option for the user.<\/p>\n

– If your AD is on Windows 2003, enable DES encyption type for your user –> after enabling this option make sure you reset the password for this user.<\/p>\n

– If you want to use AES encryption type make sure you check ”\u00a0This account supports AES 128 bit encryption “\/ “<\/strong>This account supports AES 256 bit encryption “<\/b> in the username –> properties –> Account Options field.<\/p>\n

– If you want to use \u00a0AES256-SHA1 cipher strength then,<\/p>\n

You need to download and install this bundle which provides “unlimited strength” policy files which contain no restrictions on cryptographic strengths.<\/p>\n

* For Oracle JDK 6: Download Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6 from<\/p>\n

Link : http:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/jce-6-download-429243.html.<\/p>\n

* For Oracle JDK 7: Download Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7 from<\/p>\n

Link : http:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/jce-7-download-432124.html .<\/p>\n

Overwrite 2 jar files under \u201c<JAVA_HOME>\/jre\/lib\/security\u201d directory with 2 jar files inside downloaded zip file.<\/p>\n

Step 2 :<\/strong><\/p>\n

Create a krb5.ini file.<\/p>\n

Syntax :<\/strong><\/p>\n

*****<\/p>\n

[libdefaults]
\n<\/span>default_realm = <Identifies the default realm. Set its value to your Kerberos realm – all caps>
\n<\/span>default_tkt_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
\n<\/span>default_tgs_enctypes = aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
\n<\/span>permitted_enctypes = \u00a0aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
\n<\/span>ticket_lifetime = 600
\n<\/span>kdc_timesync = 1
\n<\/span>ccache_type = 4
\n<\/span>[realms]
\n<Your Kerberos realm \u2013 remember all caps> = {
\nkdc = <IP address of the KDC\/AD server>
\n<\/span>(For Unix systems, you need to specify port 88, as in <IP-address>:88)
\n<\/span>admin_server = <FQDN – host name of the KDC\/AD server>
\n<\/span>default_domain = <Windows domain name in caps>
\n<\/span>}
\n<\/span>[domain_realm]
\n.<DNS domain name suffix, starting with .> = <Your Kerberos realm \u2013 remember all caps>
\n<\/span><DNS domain name suffix.> = <Your Kerberos realm \u2013 remember all caps>
\n<\/span>[appdefaults]
\nautologin = true
\n<\/span>forward = true
\n<\/span>forwardable = true
\n<\/span>encrypt = true<\/span><\/div>\n

*****<\/p>\n

Note :<\/strong><\/p>\n

* This file has to be created on the machine where Weblogic Server is installed.<\/p>\n

* If you have Weblogic Server installed on a Windows machines, create a file named krb5.ini \u00a0\/ On Unix machines, the file is called krb5.conf instead of krb5.ini.<\/p>\n

* See the following default Kerberos configuration files and their locations:<\/p>\n

[Windows] The default location is c:\\winnt\\krb5.ini.<\/p>\n

Note: if the krb5.ini file is not located in the c:\\winnt directory it might be located in c:\\windows.<\/p>\n

[Linux] The default location is \/etc\/krb5.conf.<\/p>\n

[AIX] [HP-UX] [Solaris] On other Unix platforms, the default location is \/etc\/krb5\/krb5.conf.<\/p>\n<\/div>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

https:\/\/blogs.oracle.com\/blogbypuneeth\/entry\/configure_kerberos_with_weblogic_server Steps to configure Kerberos \/ SPNEGO \/ NTLM authentication with Weblogic Server running on Oracle JDK : By Puneeth-Oracle on Jul 20, 2013 * The AD machine used in this configuration is : \u00a0SLKRBTRN6-01.slkrbtrn6.bea.com ( Windows 2008 R2 ) * Weblogic Server is on machine : SLKRBTRN6-03. ( Windows XP ) ——- Step 1 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-666","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts\/666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/comments?post=666"}],"version-history":[{"count":1,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts\/666\/revisions"}],"predecessor-version":[{"id":667,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/posts\/666\/revisions\/667"}],"wp:attachment":[{"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/media?parent=666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/categories?post=666"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thedarktimes.us\/wordpress\/wp-json\/wp\/v2\/tags?post=666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

\"\"<\/a><\/p>\n