Issue with Kerberos authentication using API / MSLSA ccache type

Ken Hornstein kenh at cmf.nrl.navy.mil
Sat Nov 23 13:51:42 EST 2024


>We are using 1.20 Kerberos library on our Windows platform for
>authenticating with our Netezza server.

Are you sure you are using MIT Kerberos?  Because based on the messages
below it sure seems like you actually using the Java Kerberos library
and I was under the impression that was it's own thing.  Also, the
debug messages you show are not ones typically generated by MIT Kerberos.
E.g.:

Java config name: C:\ProgramData\MIT\Kerberos5\krb5.ini
Loading krb5 profile at C:\ProgramData\MIT\Kerberos5\krb5.ini
Loaded from Java config
>>> KdcAccessibility: reset
>>> KdcAccessibility: reset
Acquire TGT from Cache
Principal is MYUSER at NZSQA.IBM.COM
null credentials from Ticket Cache

Nothing I can find in MIT Kerberos generates these messages.  MIT
Kerberos debug messages (which are generated by setting the KRB5_TRACE
environment variable) look like this:

[1613] 1732387726.184428: Response was from primary KDC
[1613] 1732387726.184429: Processing preauth types: PA-ETYPE-INFO2 (19)

--Ken


More information about the Kerberos mailing list