System and method for hosting multiple kerberos service principal names

A computer program product comprising a computer useable storage medium to store a computer readable program that, when executed on a computer, causes the computer to perform operations comprising:

• read a keytab file having a plurality of service principal names (SPNs) associated with a web service application;
• preload information about each SPN in the keytab file that is supported by the web service application;
• perform an authentication procedure in response to a reception of an authentication request from a client to access a web service application over a common network port of a backend server;
• check the authentication request for a corresponding SPN;
• and
• verify the authentication request according to a selected SPN.

A service principal name (SPN) authentication method comprising:

• reading a keytab file having a plurality of SPNs associated with a web service application;
• preloading information about each SPN in the keytab file that is supported by the web service application;
• performing an authentication procedure in response to a reception of an authentication request from a client to access a web service application over a common network port on a backend server;
• checking the authentication request for a corresponding SPN;
• and
• verifying the authentication request according to a selected SPN.

An authentication system comprising:

• a client computer coupled to a network, the client computer to send an authentication request;
• a backend server coupled to the client computer, the backend server to perform an authentication procedure in response to a reception of the authentication request from the client computer;
• and
• a service principal name (SPN) apparatus coupled to the backend server, the SPN apparatus to configure a plurality of service principal names (SPNs) for the web service application to allow an administrator to host the plurality of SPNs on the backend server over a common network port.