Some JGSS Used Java Properties
You can configure some aspects of JGSS by specifying Java™ Properties.
For Kerberos, you can use system properties to configure your Kerberos environment during run time. These system properties override values that are specified in a Kerberos configuration file.
|Kerberos configuration file
|Kerberos key distribution center (KDC) for the default realm, if not specified in the Kerberos configuration file
|Kerberos default realm, if not specified in the Kerberos configuration file
|True by default. Set to false to enable JAAS Kerberos login when JGSS cannot get credentials from the current Subject.
|JAAS login configuration file
|JAAS authorization policy file
|Security Manager to be used for authorization checks, and so on
|JGSS debug control
|Specifies the acceptor's initial sequence number when mutual authentication is not requested by the Kerberos V5 initiator. The default value is initiator, which specifies that the initiator and the acceptor both assume that the acceptor's initial sequence number is the same as the initiator's. If set to zero or 0, both assume the acceptor's initial sequence number is 0. Other values trigger an error when the system property is read. If you use this system property, you must set it to a matching value on both the initiator and acceptor.
|Specifies encryption types (default_tgs_enctypes and default_tkt_enctypes) when a Kerberos configuration file is not used. For more information and possible values, see Supported Encryption Types.
|Kerberos debug control
|False by default. A security permission check is performed on a principal with deduced realm. The check ensures that only the authorized principal can initiate or accept secure connections. If the value of this property is true, there is no security check performed.