libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

KEYCLOAK-3842 SPNEGO: Support for multiple kerberos realms

Browse source
This commit is contained in:
Hisanobu Okuda 2017-11-16 17:03:08 +09:00 committed by Marek Posolda
parent 2a2e6c839b
commit 3d0512efd8
1 changed files with 0 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
federation/kerberos/src/main/java/org/keycloak/federation/kerberos/impl/SPNEGOAuthenticator.java
View file

@ -115,9 +115,6 @@ public class SPNEGOAuthenticator {
public String getAuthenticatedUsername() { public String getAuthenticatedUsername() {
String[] tokens = authenticatedKerberosPrincipal.split("@"); String[] tokens = authenticatedKerberosPrincipal.split("@");
String username = tokens[0]; String username = tokens[0];
if (!tokens[1].equalsIgnoreCase(kerberosConfig.getKerberosRealm())) {
throw new IllegalStateException("Invalid kerberos realm. Realm from the ticket: " + tokens[1] + ", configured realm: " + kerberosConfig.getKerberosRealm());
}
return username; return username;
} }