Java-JNDI / Active Directory / Kerberos / WebLogic Server-密码配置

Question

I want to fetch data from an Active Directory using Java and JNDI from my EJB. Doing this search I need to define a user and a password. I was thinking of creating a service account (for my server) in the AD.

I will also be using Kerberos protocol and WebLogic Server. As I understand it now, I need to create a keytab file that will contain this service account's credentials. This keytab file will then be configured in the WebLogic Server?

So, this means that I will have to state the username/password both for the keytab file and in my EJB ( to fetch the data from the AD using JNDI ). What is the best approach for this? Can the keytab file be defined dynamically? Which would simplify changing the password and only doing this at one place.

Answer 1

让您的计算机加入域，使用计算机帐户启动WebLogic Server或授予对计算机密钥表的访问权限，使用DirContextSourceFactory创建JDNI资源，然后您就可以根据需要访问AD。