在 JAVA 中重新加载 Kerberos 配置而不重新启动 JVM

发布于 2024-08-05 04:28:30 字数 770 浏览 6 评论 0原文

以下代码用于使用 Java+Kerberos 对 Windows AD 服务器进行身份验证，并且运行良好 -

public class KerberosAuthenticator {
  public static void main(String[] args) {
    String jaasConfigFilePath = "/myDir/jaas.conf";

    System.setProperty("java.security.auth.login.config", jaasConfigFilePath);

    String krb5ConfigFilePath = "/etc/krb5/krb5.conf";
    System.setProperty("java.security.krb5.conf", krb5ConfigFilePath);

    boolean success = auth.KerberosAuthenticator.authenticate("testprincipal", "testpass");

    System.out.println(success);
}
}

以上只是一个测试程序。实际代码将在 tomcat web 应用程序中运行。我面临的问题是，如果 krb5.conf 文件发生更改，如果早期版本的 krb5.conf 已经成功进行了一次身份验证，则同样的情况不会反映在 tomcat 中。新的更改仅反映在重新启动 tomcat 时。

我想知道是否有一种方法可以指定JVM重新加载krb5.conf，以便在不重新启动JVM的情况下获得最新的更改。

原文

The following code is for authenticating to a windows AD server using Java+Kerberos and it works fine-

public class KerberosAuthenticator {
  public static void main(String[] args) {
    String jaasConfigFilePath = "/myDir/jaas.conf";

    System.setProperty("java.security.auth.login.config", jaasConfigFilePath);

    String krb5ConfigFilePath = "/etc/krb5/krb5.conf";
    System.setProperty("java.security.krb5.conf", krb5ConfigFilePath);

    boolean success = auth.KerberosAuthenticator.authenticate("testprincipal", "testpass");

    System.out.println(success);
}
}

The above is a just a test program. The actual code will run in a tomcat webapp. The problem I am facing is, if the krb5.conf file changes, the same is not reflected in the tomcat, if a successful authentication has already happened once with the earlier version of krb5.conf. The new changes reflect only on restart of tomcat.

I want to know if there is a way to specify the JVM to reload the krb5.conf so that it gets the latest changes without restarting the JVM.

分享到QQ

分享到微博