[ 
https://issues.apache.org/jira/browse/DIRKRB-100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13912785#comment-13912785
 ] 

Eirik Bjorsnos commented on DIRKRB-100:
---------------------------------------

And here's the caused by stack trace:

Caused by: org.apache.directory.api.asn1.DecoderException: 
ERR_00001_BAD_TRANSITION_FROM_STATE Bad transition from state START_STATE, tag 
0x0E
        at 
org.apache.directory.api.asn1.ber.grammar.AbstractGrammar.executeAction(AbstractGrammar.java:125)
        at 
org.apache.directory.api.asn1.ber.Asn1Decoder.treatTLVDoneState(Asn1Decoder.java:599)
        at 
org.apache.directory.api.asn1.ber.Asn1Decoder.decode(Asn1Decoder.java:735)
        at 
org.apache.directory.server.kerberos.protocol.codec.KerberosDecoder.decodeEncTgsRepPart(KerberosDecoder.java:680)
        ... 9 more

> Active Directory support for KdcConnection
> ------------------------------------------
>
>                 Key: DIRKRB-100
>                 URL: https://issues.apache.org/jira/browse/DIRKRB-100
>             Project: Directory Kerberos
>          Issue Type: Improvement
>            Reporter: Eirik Bjorsnos
>            Assignee: Emmanuel Lecharny
>
> I'm testing KdcConnection.getTgt() with Microsoft Active Directory.
> My first test failed with AD responding with first saying 
> KRB5KRB_ERR_PREAUTH_REQUIRED (expected), then KRB5KRB_ERR_PREAUTH_FAILED (not 
> expected).
> Since PREAUTH_FAILED is what you'll also get if your password is wrong, I 
> enabled "Do not use pre authentication" for the account being tested and 
> verified via kinit on OS X that no pre authentication was sent there.
> When testing getTgt with no preauth, I now get the following exception:
> Exception in thread "main" 
> org.apache.directory.server.kerberos.changepwd.exceptions.ChangePasswordException:
>  Request failed due to being malformed.
>       at 
> org.apache.directory.server.kerberos.protocol.codec.KerberosDecoder.decodeEncTgsRepPart(KerberosDecoder.java:684)
>       at 
> org.apache.directory.kerberos.client.KdcConnection._getTgt(KdcConnection.java:329)
>       at 
> org.apache.directory.kerberos.client.KdcConnection.getTgt(KdcConnection.java:181)
>       at 
> org.apache.directory.kerberos.client.KdcConnection.getTgt(KdcConnection.java:145)



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to