Authentication attempt failedjavax.security.auth.login.LoginException: null (68)

[Max (Weijun) Wang]

68 is KDC_ERR_WRONG_REALM.

I noticed that in 2 places in your debug output, there is a mysterious  
" " at the head of the realm name. Does it really exist in the  
original output?

I have no idea how this can happen. What version of JDK/JRE are you  
using?

-Max

On Dec 31, 2009, at 5:31 AM, Paulo Lima wrote:

> Him Tom,
>
> Thanks for the quick reply!
>
> It was a screenshot image that I had pasted in the body of my previous
> email msg. Here is what it says:
>
> *************************************************************
>
> C:\Temp\jaasinfo>java
> -Djava.security.auth.login.config="C:\Temp\jaasinfo\token_jaas.conf"
> -Djava.security.krb5.conf="C:\Temp\jaasinfo\krb5.conf"
> -Dsun.security.krb5.debug=true
> com.jtester.actional.training.samples.ClientSideKerberosHandler
> Kerberos username [Administrator]: jtester
> Kerberos password for jtester: foo123
> Using builtin default etypes for default_tkt_enctypes
> default etypes for default_tkt_enctypes: 3 1 16.
> Using builtin default etypes for default_tkt_enctypes
> default etypes for default_tkt_enctypes: 3 1 16.
>>>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
>>>> KrbAsReq calling createMessage
>>>> KrbAsReq in createMessage
>>>> KrbKdcReq send: kdc=FISHERSLDAP.USA-ED.NET UDP:88, timeout=30000,
> number of retries =3, #bytes=245
>>>> KDCCommunication: kdc= FISHERSLDAP.USA-ED.NET UDP:88,
> timeout=30000,Attempt =1, #bytes=245
>>>> KrbKdcReq send: #bytes read=116
>>>> KrbKdcReq send: #bytes read=116
>>>> KDCRep: init() encoding tag is 126 req type is 11
>>>> KRBError:
>         sTime is Tue Dec 29 15:07:24 GMT-06:00 2009 1262120844000
>         suSec is 450702
>         error code is 68
>         error Message is null
>         realm is FISHERSLDAP.USA-ED.NET
>         sname is krbtgt/ FISHERSLDAP.USA-ED.NET
> Authentication attempt failedjavax.security.auth.login.LoginException:
> null (68)
>
> C:\Temp\jaasinfo>
>
> *************************************************************
>
> Thanks again,
> Paulo
>
>
>
> -----Original Message-----
> From: Tom Yu [mailto:tlyu at MIT.EDU]
> Sent: Wednesday, December 30, 2009 2:50 PM
> To: Paulo Lima
> Cc: krbdev at mit.edu
> Subject: Re: Authentication attempt
> failedjavax.security.auth.login.LoginException: null (68)
>
> "Paulo Lima" <plima at progress.com> writes:
>
>> Has anybody seen this error before? Any ideas of what might be  
>> causing
>> it?
>
> Your original message probably contained an image attachment that the
> mail server deleted.  (This list only allows text.)  Please post a
> link to that image instead.
>
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev