Merge pull request #32 from orchitech/return-realm

Add support for returning Kerberos realm
WrenSecurity · Sep 23, 2021 · 8564f15 · 8564f15
2 parents 8b3ca9e + 0e8ad59
commit 8564f15
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/...forgerock-jaspi-iwa-module/src/main/java/org/forgerock/jaspi/modules/iwa/wdsso/WDSSO.java b/...forgerock-jaspi-iwa-module/src/main/java/org/forgerock/jaspi/modules/iwa/wdsso/WDSSO.java
@@ -224,6 +224,7 @@ public void nullifyUsedVars() {
         keyTabFile = null;
         kdcRealm = null;
         kdcServer = null;
+        returnRealm = false;
     }
 
     private String getUserName(String user) {
@@ -340,8 +341,11 @@ private boolean getConfigParams(Map<String, String> options) {
         keyTabFile = options.get("keytabFileName");
         kdcRealm = options.get("kerberosRealm");
         kdcServer = options.get("kerberosServerName");
-        LOG.debug("IWA WDSSO: WindowsDesktopSSO params: principal: {}, keytab file: {}, realm : {}, kdc server: {}",
-                servicePrincipalName, keyTabFile, kdcRealm, kdcServer);
+        if (options.get("returnRealm") != null) {
+            returnRealm = Boolean.valueOf(options.get("returnRealm"));
+        }
+        LOG.debug("IWA WDSSO: WindowsDesktopSSO params: principal: {}, keytab file: {}, realm : {}, kdc server: {}, returnRealm: {}",
+                servicePrincipalName, keyTabFile, kdcRealm, kdcServer, returnRealm);
         return serviceSubject != null;
     }