I'm using kerbtray.exe on Win7.
How do I know exactly what the realm and 开发者_运维问答kdc is for a java gss-api login?
You are probably referring to the krb5.ini maintenance, right? You should start with the realm your process is logged in to. If you plan to do cross-realm, you have to add every realm which you want to authenticate to and eventually your root realm. If you are unsure, you can look it up with DNS:
$host -t SRV _kerberos._tcp.<you realm>
and
$host -t SRV _kerberos._udp.<you realm>
See here for reference.
精彩评论