Hello, For my configuration, the manual is 100% correct (I detailed steps I needed to take to get SPNeGO working in my environment)
I didnt see what app server you are running CAS on..is it Linux and Tomcat, Linux and Weblogic, Jboss, ??? The first step would be to make sure your kerberos is set up correctly. For a linux system you should run the kinit command and supply credentials for the user that maps to your SPN kinit kingkoopa -- this will result in a prompt for kingkoopa's password. enter kingkoopas password The kinit command should complete silently i.e. no errors after running it. To check, that it completed correctly run the klist command. If the kinit command was successful you would see output from the klist command that looks something like this: Ticket cache: FILE:/tmp/krb5cc_0 Default principal: kingko...@mydomain.com Valid starting Expires Service principal 08/31/10 09:48:07 08/31/10 19:48:03 krbtgt/mydomain....@mydomain.com renew until 09/01/10 09:48:07 Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached Once you validate that kerberos is working I can post copies of working CAS config files. Good luck, Dean -- View this message in context: http://jasig.275507.n4.nabble.com/Re-cas-user-Is-SPNEGO-manual-100-correct-tp2401681p2401949.html Sent from the CAS Users mailing list archive at Nabble.com. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user