用Java编写的Kerberos管理客户端

Question

Is there an implementation of the MIT Kerberos admin protocol in Java which i can use to create an kerberos administration client written in Java?

My application should be able to:
1.) authenticate with MIT Kerberos Server
2.) add/delete user/service principals

No kadmin.local calls. JNI Bindings would work, too.

Alternative: Since kerberos credentials are saved in ldap it is possible to change those information. This might be an easy alternative. But this would mean editing KDCs database itself. This bypasses the kadmin protocol and requires knowledge of how this database is created. This method should not be favored over a kadmin protocol interface.

Answer 1

使用Apache Directory Studio，这是一个非常不错的工具。