Resources.FitNesseRoot.FitNesse.UserGuide.AdministeringFitNesse.SecurityDescription.SpnegoAuthentication.content.txt Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of fitnesse Show documentation

The fully integrated standalone wiki, and acceptance testing framework.

There is a newer version: 20250223

!2 How to enable for Kerberos/Active Directory
!note Not tested as part of the normal build.  Use at your own risk.

Enable this plugin by editing !style_code(plugins.properties) and adding the line:
!style_code(!-Authenticator = fitnesse.authentication.NegotiateAuthenticator-!)

If using Kerberos on Unix, create a !style_code(jaas-krb5.conf) file with these contents:
{{{
com.sun.security.jgss.accept  {
       com.sun.security.auth.module.Krb5LoginModule required
       storeKey=true
       isInitiator=false
       principal="HTTP/[email protected]"
       useKeyTab=true
       keyTab="/path/to/your/http.keytab"
       ;
    };
}}}
Next, define these system properties when running the FitNesse server:

{{{
-Djavax.security.auth.useSubjectCredsOnly=false
-Djava.security.auth.login.config=/path/to/jaas-krb5.conf
-Dsun.security.krb5.debug=true
}}}
You can remove the !style_code(krb5.debug) property later, when you know it's working.

{{{
 * @author David Leonard Released into the Public domain, 2009. No warranty:
 *         Provided as-is.
}}}