oio tutorial (Krb5LoginModule)
Rouiller Claude
claude.rouiller at rtc.ch
Wed May 19 02:26:48 EDT 2004
Hi
I'm trying to make a Kerberos tutorial run of my test environment, but i
haven't much success.
The tutorial is found at
http://www.oio.de/public/java/jaas/sso-jaas-kerberos-tutorial.htm
<http://www.oio.de/public/java/jaas/sso-jaas-kerberos-tutorial.htm> .
I have
- 2 Windows 2003 domain controllers and KDC (one master and one "backup").
- 1 Windows XP client.
When I run the code I get the following exception:
(switching off preauthentication for this user doesn't help).
javax.security.auth.login.LoginException: Pre-authentication information was
invalid (24)
at
com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Unknown
Source)
at com.sun.security.auth.module.Krb5LoginModule.login(Unknown
Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at javax.security.auth.login.LoginContext.invoke(Unknown Source)
at javax.security.auth.login.LoginContext.access$000(Unknown Source)
at javax.security.auth.login.LoginContext$4.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokeModule(Unknown
Source)
at javax.security.auth.login.LoginContext.login(Unknown Source)
at LoginJaas.main(LoginJaas.java:51)
Caused by: KrbException: Pre-authentication information was invalid (24)
at sun.security.krb5.KrbAsRep.<init>(Unknown Source)
at sun.security.krb5.KrbAsReq.getReply(Unknown Source)
at sun.security.krb5.Credentials.acquireTGT(Unknown Source)
... 13 more
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.af.a(Unknown Source)
at sun.security.krb5.internal.at.a(Unknown Source)
at sun.security.krb5.internal.at.<init>(Unknown Source)
... 16 more
Can someone help??
Thanks, Claude
More information about the Kerberos
mailing list