Constructor Detail

• KerberosAuthenticationProcessingFilter

  public KerberosAuthenticationProcessingFilter()

Method Detail

• doFilter

  public void doFilter(javax.servlet.ServletRequest req,
              javax.servlet.ServletResponse res,
              javax.servlet.FilterChain chain)
                throws IOException,
                       javax.servlet.ServletException

  Throws:

  IOException

  javax.servlet.ServletException

• setAuthenticationManager

  public void setAuthenticationManager(org.springframework.security.authentication.AuthenticationManager authenticationManager)

  The authentication manager for validating the ticket.

  Parameters:

  authenticationManager -

• setSuccessHandler

  public void setSuccessHandler(org.springframework.security.web.authentication.AuthenticationSuccessHandler successHandler)

  This handler is called after a successful authentication. One can add additional authentication behavior by setting this.
  Default is null, which means nothing additional happens

  Parameters:

  successHandler -

• setFailureHandler

  public void setFailureHandler(org.springframework.security.web.authentication.AuthenticationFailureHandler failureHandler)

  This handler is called after a failure authentication. In most cases you only get Kerberos/SPNEGO failures with a wrong server or network configurations and not during runtime. If the client encounters an error, he will just stop the communication with server and therefore this handler will not be called in this case.
  Default is null, which means that the Filter returns the HTTP 500 code

  Parameters:

  failureHandler -

• setSkipIfAlreadyAuthenticated

  public void setSkipIfAlreadyAuthenticated(boolean skipIfAlreadyAuthenticated)

  Should Kerberos authentication be skipped if a user is already authenticated for this request (e.g. in the HTTP session).

  Parameters:

  skipIfAlreadyAuthenticated - default is true

• setSessionAuthenticationStrategy

  public void setSessionAuthenticationStrategy(org.springframework.security.web.authentication.session.SessionAuthenticationStrategy sessionAuthStrategy)

  The session handling strategy which will be invoked immediately after an authentication request is successfully processed by the AuthenticationManager. Used, for example, to handle changing of the session identifier to prevent session fixation attacks.

  Parameters:

  sessionAuthStrategy - the implementation to use. If not set a null implementation is used.

• setAuthenticationDetailsSource

  public void setAuthenticationDetailsSource(org.springframework.security.authentication.AuthenticationDetailsSource<javax.servlet.http.HttpServletRequest,?> authenticationDetailsSource)

• afterPropertiesSet

  public void afterPropertiesSet()
                          throws javax.servlet.ServletException

  Specified by:

  afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

  Overrides:

  afterPropertiesSet in class org.springframework.web.filter.GenericFilterBean

  Throws:

  javax.servlet.ServletException