Jetty 12.0.x SPNEGO: setha igama lesevisi, hhayi i-principal egcwele

Ihlukanise i-proxy URI, umsebenzisi we-JAAS kanye nengxenye yesevisi ye-GSS lapho uhlela ukuqinisekisa kwe-Jetty 12.

Kusethaphu ye-Jetty SPNEGO kukhona amagama amathathu: i-URI esetshenziselwa ukufanisa ukuqinisekisa, umsebenzisi ongena nge-JAAS kanye nesevisi okucelwa ithikithi yayo. Ngayinye inenhloso ehlukile.

Ngokwenzeka kwe-Jetty 12.0.x, ingxenye yento yokuqinisekisa ithi:

var auth = new org.eclipse.jetty.client.SPNEGOAuthentication(
    java.net.URI.create("http://proxy.example:8080"));
auth.setServiceName("HTTP");

Le ngxenye ikhombisa ingxenye yesevisi, hhayi indlela ephelele yokuqinisekisa nge-proxy. Ukungena kwe-JAAS, ukuhamba kwe-proxy nokushintshana kokuqinisekisa kwesicelo kuhlala kwehlukile.

Kulokhu kusebenza i-Jetty yakha igama le-GSS elisekelwe kumphehli ngokuhlanganisa i-getServiceName(), uhlamvu @ kanye nomphehli wokushintshana kokuqinisekisa. Uma unikeza [email protected] njengengxenye yesevisi, kuzongezwa omunye umphehli. Funda isivumelwano sale setter esikhundleni sokucabanga ukuthi yamukela i-principal ephelele ye-Kerberos.

Igama le-GSS eliphumayo linesimo somqondo elithi HTTP@hostname. I-principal yesevisi ehambisanayo ku-KDC ivame ukumelwa njenge-HTTP/hostname. igama le-proxy elikhethiwe kufanele lihambisane nesevisi ebhaliswe ngempela yaleyo akhawunti; ikheli le-IP noma isibonelo kungase kukhethe enye imigomo yethikithi.

Hlola nendlela ye-407

Ku-Jetty 12.0.x i-authenticate() ithola igama lomphehli le-GSS ku-request.getHost() futhi yakhe umphumela ngesihloko se-Authorization esizenzakalelayo. Ukufanisa into yokuqinisekisa nge-proxy URI akuzishintshi ngokwako lezo zinqumo zibe igama lomphehli we-proxy ne-Proxy-Authorization.

Ngakho-ke ukuhlanganiswa kwe-proxy kudinga umphehli wesicelo ofanele kanye nomphumela ogxile ku-proxy walokho kushintshana. Isicelo se-HTTPS CONNECT nesicelo esivamile somthombo kungaba namanani ahlukene omphehli. Qinisekisa ukuziphatha kokusebenza okufakiwe esikhundleni sokucabanga ukuthi isethi yegama lesevisi inikeza ukuhamba okuphelele kwe-407.

Nge-407, hlola ukushintshana kokuqinisekisa kwe-proxy nomphehli osetshenziswe yileso sicelo. I-401 ingeyokuqinisekisa komthombo. Ithikithi lomsebenzisi elivumelekile lodwa alifakazisi ukuthi i-Jetty icele ithikithi lesevisi elifanele noma ukuthi umlamuli walemukela.

Izihloko ezihlobene