Relative path for JAAS keytab configuration

Question

I have a system wherein .NET clients authenticate against a Java server with Kerberos. Everything works, but I'm trying to improve the server configuration. Currently a keytab file is required in the root of C:\\ because my jaas.conf looks like this:

Server {
    com.sun.security.auth.module.Krb5LoginModule required
    useKeyTab=true
    storeKey=true
    isInitiator=false
    keyTab="///C:/keytab"
    principal="XXX";
};

I am trying to make the keyTab property a relative path, but am having no luck. What I've tried:

• keyTab="///keytab"
• keyTab="///./keytab"
• keyTab="classpath:keytab"

All of these result in an exception, so clearly the keytab file cannot be found.

I've searched and read the docs and banged my head on a wall over this. Can anyone reveal the magical incantation I need to make this happen?

Answer 1

请使用keyTab="keytab"类似于示例： http : keyTab="keytab"

Answer 2

I tried as well putting the keytab in the same folder as the jaas.conf file (in the conf folder). Doing keytab="keytab" would not work. Fortunately, it uses the same configuration variables used elsewhere, so the solution was to set:

keyTab="${catalina.base}/conf/keytab"