You can find more information about Kerberos and the usage of keytabs in this detailed blog post. If you share your test plan with other team members, everyone has to create that keytab file on its own initially at least once. Anyway you should not store that keytab file in a shared location (like a Git repository).
#Apache jmeter domain names password#
So it’s not necessary to store the password in the test plan file (which is a plain XML document). In short the keytab file empowers JMeter to send the encrypted password to the Kerberos KDC to obtain a valid ticket for that user.
So treat the keytab file like you would with a protected password phrase. This file contains the credentials in a encrypted format but you should keep in mind that anyone who has access to that file can impersonate that user. In our case we are going to use a so called keytab file to store the principal information of the account we are going to use in our load test. This file contains the configuration for the Java runtime to handle the Kerberos ticket handling. The systems core component is the Key Distribution Center (KDC) that is part of the Active Directory domain controller and performs the user authentication and ticket granting that involves the following exchanges:Īfter successful authentication the requesting user will be granted a Kerberos ticket that can be exchanged with the targeting server to access its protected resources. The Kerberos protocol is based on RFC 1510 and provides authentication for a distributed network environment and is interoperable between various operating systems. Since NTLM is more or less obsolete due to several security issues Kerberos is the recommended authentication service by Microsoft when you manage an Active Directory Service based (company) network.
#Apache jmeter domain names how to#
In the following article I describe how to use and configure Apache JMeter in an environment where Kerberos authentication is required. But when the necessary configuration is applied correctly it runs as smooth as expected. To run your JMeter load test against a Kerberos protected HTTP endpoint can be a bit cumbersome.
0 kommentar(er)
