krb5.conf:
	[logging]
		default = FILE:/var/log/kerberos/krb5libs.log
		kdc = FILE:/var/log/kerberos/krb5kdc.log
		admin_server = FILE:/var/log/kerberos/kadmind.log
	[libdefaults]
		default_realm = LOCAL.NETWORK
		default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
		default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
		permitted_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
	[realms]
		LOCAL.NETWORK = {
			kdc = kerberosMachine.local.network
			admin_server = kerberosMachine.local.network
		}
	[domain_realm]
		local.network = LOCAL.NETWORK
		.local.network = LOCAL.NETWORK
	[login]
		krb4_convert = false
		krb4_get_tickets = false


login.conf:
	KerberosClient {
	    com.sun.security.auth.module.Krb5LoginModule required useTicketCache=true;
	};
	KerberosServer {
	    com.sun.security.auth.module.Krb5LoginModule required
	    useKeyTab=true keyTab="/etc/krb5.keytab"
	    doNotPrompt=true
	    storeKey=true
	    principal="Service/glassfishMachine.local.network@LOCAL.NETWORK";
	};


wsit-service.xml:
	<?xml version="1.0" encoding="UTF-8"?> 
	 <definitions 
	 xmlns="http://schemas.xmlsoap.org/wsdl/" 
	 xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/" 
	 xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
	 xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" name="Service" targetNamespace="http://service/" xmlns:tns="http://service/" xmlns:wsp="http://www.w3.org/ns/ws-policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:fi="http://java.sun.com/xml/ns/wsit/2006/09/policy/fastinfoset/service" xmlns:tcp="http://java.sun.com/xml/ns/wsit/2006/09/policy/soaptcp/service" xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata" xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702" xmlns:sc="http://schemas.sun.com/2006/03/wss/server" xmlns:wspp="http://java.sun.com/xml/ns/wsit/policy" 
	 >
	    <message name="hello"/>
	    <message name="helloResponse"/>
	    <portType name="Service">
		<operation name="hello">
		    <input message="tns:hello"/>
		    <output message="tns:helloResponse"/>
		</operation>
	    </portType>
	    <binding name="ServicePortBinding" type="tns:Service">
		<wsp:PolicyReference URI="#ServicePortBindingPolicy"/>
		<operation name="hello">
		    <input>
		        <wsp:PolicyReference URI="#ServicePortBinding_hello_Input_Policy"/>
		    </input>
		    <output>
		        <wsp:PolicyReference URI="#ServicePortBinding_hello_Output_Policy"/>
		    </output>
		</operation>
	    </binding>
	    <service name="Service">
		<port name="ServicePort" binding="tns:ServicePortBinding"/>
	    </service>
	    <wsp:Policy wsu:Id="ServicePortBindingPolicy">
		<wsp:ExactlyOne>
		    <wsp:All>
		        <wsam:Addressing wsp:Optional="false"/>
		        <sc:KeyStore wspp:visibility="private" type="JKS" storepass="changeit" alias="xws-security-server"/>
		        <sp:SymmetricBinding>
		            <wsp:Policy>
		                <sp:ProtectionToken>
		                    <wsp:Policy>
		                        <sp:KerberosToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Once">
		                            <wsp:Policy>
		                                <sp:WssGssKerberosV5ApReqToken11/>
		                            </wsp:Policy>
		                        </sp:KerberosToken>
		                    </wsp:Policy>
		                </sp:ProtectionToken>
		                <sp:Layout>
		                    <wsp:Policy>
		                        <sp:Strict/>
		                    </wsp:Policy>
		                </sp:Layout>
		                <sp:IncludeTimestamp/>
		                <sp:OnlySignEntireHeadersAndBody/>
		                <sp:AlgorithmSuite>
		                    <wsp:Policy>
		                        <sp:Basic128/>
		                    </wsp:Policy>
		                </sp:AlgorithmSuite>
		                <sp:EncryptSignature/>
		            </wsp:Policy>
		        </sp:SymmetricBinding>
		        <sp:Wss11>
		            <wsp:Policy>
		                <sp:MustSupportRefIssuerSerial/>
		                <sp:MustSupportRefThumbprint/>
		                <sp:MustSupportRefEncryptedKey/>
		            </wsp:Policy>
		        </sp:Wss11>
		        <sc:KerberosConfig wspp:visibility="private" loginModule="KerberosServer"/>
		    </wsp:All>
		</wsp:ExactlyOne>
	    </wsp:Policy>
	    <wsp:Policy wsu:Id="ServicePortBinding_hello_Input_Policy">
		<wsp:ExactlyOne>
		    <wsp:All>
		        <sp:EncryptedParts>
		            <sp:Body/>
		        </sp:EncryptedParts>
		        <sp:SignedParts>
		            <sp:Body/>
		            <sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="AckRequested" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		            <sp:Header Name="SequenceAcknowledgement" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		            <sp:Header Name="Sequence" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		            <sp:Header Name="CreateSequence" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		        </sp:SignedParts>
		    </wsp:All>
		</wsp:ExactlyOne>
	    </wsp:Policy>
	    <wsp:Policy wsu:Id="ServicePortBinding_hello_Output_Policy">
		<wsp:ExactlyOne>
		    <wsp:All>
		        <sp:EncryptedParts>
		            <sp:Body/>
		        </sp:EncryptedParts>
		        <sp:SignedParts>
		            <sp:Body/>
		            <sp:Header Name="To" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="From" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="FaultTo" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="ReplyTo" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="MessageID" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="RelatesTo" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="Action" Namespace="http://www.w3.org/2005/08/addressing"/>
		            <sp:Header Name="AckRequested" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		            <sp:Header Name="SequenceAcknowledgement" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		            <sp:Header Name="Sequence" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		            <sp:Header Name="CreateSequence" Namespace="http://docs.oasis-open.org/ws-rx/wsrm/200702"/>
		        </sp:SignedParts>
		    </wsp:All>
		</wsp:ExactlyOne>
	    </wsp:Policy>
	</definitions>


wsit-client.conf:
	<?xml version='1.0' encoding='UTF-8'?><!-- Published by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is Metro/2.2-b13 (branches/2.2-6964; 2012-01-09T18:04:18+0000) JAXWS-RI/2.2.6-promoted-b20 JAXWS/2.2 svn-revision#unknown. --><!-- Generated by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is Metro/2.2-b13 (branches/2.2-6964; 2012-01-09T18:04:18+0000) JAXWS-RI/2.2.6-promoted-b20 JAXWS/2.2 svn-revision#unknown. --><definitions xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:wsp="http://www.w3.org/ns/ws-policy" xmlns:wsp1_2="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsam="http://www.w3.org/2007/05/addressing/metadata" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:tns="http://service/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.xmlsoap.org/wsdl/" targetNamespace="http://service/" name="Service" xmlns:sc="http://schemas.sun.com/2006/03/wss/client" xmlns:wspp="http://java.sun.com/xml/ns/wsit/policy">
	<types>
	<xsd:schema>
	<xsd:import namespace="http://service/" schemaLocation="http://glassfishmachine:8080/Service/Service?xsd=1"/>
	</xsd:schema>
	</types>
	<message name="hello">
	<part name="parameters" element="tns:hello"/>
	</message>
	<message name="helloResponse">
	<part name="parameters" element="tns:helloResponse"/>
	</message>
	<portType name="Service">
	<operation name="hello">
	<input wsam:Action="http://service/Service/helloRequest" message="tns:hello"/>
	<output wsam:Action="http://service/Service/helloResponse" message="tns:helloResponse"/>
	</operation>
	</portType>
	<binding name="ServicePortBinding" type="tns:Service">
	    <wsp:PolicyReference URI="#ServicePortBindingPolicy"/>
	    <soap:binding transport="http://schemas.xmlsoap.org/soap/http" style="document"/>
	<operation name="hello">
	<soap:operation soapAction=""/>
	<input>
	<soap:body use="literal"/>
	</input>
	<output>
	<soap:body use="literal"/>
	</output>
	</operation>
	</binding>
	<service name="Service">
	<port name="ServicePort" binding="tns:ServicePortBinding">
	<soap:address location="http://glassfishmachine:8080/Service/Service"/>
	</port>
	</service>
	    <wsp:Policy wsu:Id="ServicePortBindingPolicy">
		<wsp:ExactlyOne>
		    <wsp:All>
		        <sc:KerberosConfig wspp:visibility="private" loginModule="KerberosClient" servicePrincipal="HTTP/glassfishMachine.local.network@LOCAL.NETWORK" credentialDelegation="true"/>
		    </wsp:All>
		</wsp:ExactlyOne>
	    </wsp:Policy>
	</definitions>