Configure Tomcat for AD Kerberos + Impersonating

Question

I would like to configure Tomcat to use Kerberos authentification against Active Directory, but also to use Impersonating (i.e. the Java's worker thread should be running under the credentials of the authentificated user, so that I can then call some SharePoint webservices and pass them the Kerberos ticket with the delegation right)

Answer 1

This article Introduction to JAAS and Java GSS-API Tutorials should be able to help. This article Java vs. .NET Security, Part 4 may be helpful also, it specifically goes over impersonation.

Answer 2

This open source library, http://spnego.sourceforge.net, has instructions on how to do SSO on Tomcat.

It also has a delegation example.

Answer 3

Waffle (Windows-only) will do all, but impersonation.