There is a memory leak in the Kerberos code in Sun JDK prior to 1.6.8 and newer, so I would make sure you have the absolute latest version of 1.6
On 8/20/09 1:11 PM, "Natarajan, Ramya" <[email protected]> wrote: > Thanks for responding. I got this working by upgrading my java to jdk1.6 from > 1.5. It looks like this version of java has many kerberos related fixes.? > Hope this helps someone. > > > On Wed, Aug 19, 2009 at 7:40 PM, Shi Yusen <[email protected]> wrote: >> I'm not familiar with Windows Kerberos. As you have tried all the 4 >> causes, I guess you should recheck the No.4 as it's mentioned DNS, make >> sure your DNS is configured correctly for Kerberos protocol. >> >> Regards, >> >> Shi Yusen/Beijing Langhua Ltd. >> >> >> 在 2009-08-19三的 12:04 -0700，Natarajan, Ramya写道： >>> > Hi, >>> > >>> > I am trying to authenticate to my Active Directory 2003 using >>> > kerberos. I have the jaas config file and krb5.conf file in place and >>> > CAS seems to be trying to authenticate. I get this error though - >>> > [Krb5LoginModule] authentication failed : Pre-authentication >>> > information was invalid (24) >>> > >>> > Can you please tell me what this error means and how to resolve this? >>> > I am very new to kerberos. >>> > This link had some suggestions and I have tried them all and with no >>> > luck. >>> > >>> http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troublesho >>> oting.html >>> > >>> > thanks for your help. >>> > >>> > My jaas config file is >>> > CAS { >>> > com.sun.security.auth.module.Krb5LoginModule required debug=TRUE; >>> > }; >>> > >>> > My krb5.conf file is (XYZ is replaced with my actual realm name) >>> > [libdefaults] >>> > default_realm = XYZ.COM <http://XYZ.COM> >>> > [domain_realm] >>> > watcher.xyz.com <http://watcher.xyz.com> = XYZ.COM <http://XYZ.COM> >>> > [realms] >>> > XYZ.COM <http://XYZ.COM> = { >>> > kdc = director.xyz.com <http://director.xyz.com> >>> > admin_server = director.xyz.com <http://director.xyz.com> >>> > } >>> > -- >>> > You are currently subscribed to [email protected] as: >>> [email protected] >>> > To unsubscribe, change settings or access archives, see >>> http://www.ja-sig.org/wiki/display/JSG/cas-user >> >> >> -- >> You are currently subscribed to [email protected] as: [email protected] >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-user -- Andrew Feller, Business System Programmer LSU University Information Services 200 Frey Computing Services Center Baton Rouge, LA 70803 Office: 225.578.3737 Fax: 225.578.6400 -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
