Spring-security, Tomcat, and SPNEGO - the best approach

Question

I am looking for the best approach to achieve SPNEGO / Kerberos login for spring-security application for Tomcat and Windows. Candidates I have looked at:

• Spring Kerberos Extension for Security
• Waffles
• Apache httpd using mod_auth_kerb
• Apache httpd with mod_auth_sspi module

I was not impressed with Waffle, and mod_auth_sspi seems to support NTLMv1, so it is not. I see that you are running into Apache httpd, so this is a good approach. How well this plays with spring-security, though, is interesting. Who did this? What is the best / most stable approach?

Answer 1

. Spring SEC. . .