kerberos-principal-name

Use the kerberos-principal-name entry to set the service principal name of the impersonating user when creating a Kerberos token.

kerberos-principal-name = principal_name

Description

The service principal name can be determined by executing the Microsoft utility setspn. For example:

setspn -L user

where user is the identity of the WebSEAL account.

Options

principal_name

The service principal name of the impersonating user when creating a Kerberos token.

Usage:

This stanza entry is required when Kerberos SSO authentication for junctions is enabled.

Default: None.

Example:

kerberos-principal-name = HTTP/webseal@<realm>

Parent topic: [junction] stanza