[ldap-sdk-discuss] GSSAPI bind

[Sergey K. <skl...@op...>]

Hello,
Could you, please, give more details about setUseSubjectCredentialsOnly method of GSSAPIBindRequestProperties class?
I can't understand functionality from the description:
// Specifies whether to allow the client to use credentials that are outside the current subject.
// If this is false, then a system-specific mechanism may be used in an attempt to obtain credentials from an existing session.
What means current subject?
Is it about cross realm Authentication?
When it should be set to "false"?

And another question. I try to use keytab file and call setUseKeyTab(true) method of GSSAPIBindRequestProperties class. I DON'T call setKeyTabPath("path") method.
But I see the error: "Key for the principal us...@EX... not available in default key tab"
What should be the name of "default key tab" in Windows and Linux/Unix?
Where default keytab file should be located in Windows and Linux/Unix?

Thanks in advance,
Sergey