JAASRealm, Kerberos, and Open Directory

I'd like to set up a Realm which gets it's authentication information using Kerberos, specifically Open Directory running under OS X Server 10.3.9. For initial testing, I'm running Tomcat 5.5.7 on the same machine (the copy the comes with NetBeans 4.1), and setting CATALINA_BASE to a direc

Does using Kerberos with Tomcat reduce my security?

After some effort, I've managed to set up a JAASRealm that draws its account information from our Kerberos server (Krb5LoginModule, connecting to Open Directory on OS X Server 10.3.9). One of the key security properties of Kerberos is that passwords are never sent over the network, even in encryp