[
https://issues.apache.org/jira/browse/HTTPCLIENT-523?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12750669#action_12750669
]
Zhiyong Li commented on HTTPCLIENT-523:
---------------------------------------
I tried to use Matthew's 22/Jun/09 code of "protected void init(String server)
throws GSSException". It gets me further, but I am still getting the following
exception. I also have a sample which uses Java 6 HTTP/SPNEGO implementation,
that one works fine. I noticed that for the success code, UDP is used instead
of TCP, for example: kdc=bcidcvm01.bci.sas.com UDP:88. Can someone explain this
and also can I configure httpclient to use UDP?
Found ticket for [email protected] to go to krbtgt/[email protected]
expiring on Wed Sep 02 2
1:46:08 EDT 2009
Entered Krb5Context.initSecContext with state=STATE_NEW
Service ticket not found in the subject
>>> Credentials acquireServiceCreds: same realm
default etypes for default_tgs_enctypes: 3 23.
>>> CksumType: sun.security.krb5.internal.crypto.RsaMd5CksumType
>>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
>>> KrbKdcReq send: kdc=bcidcvm01.bci.sas.com TCP:88, timeout=30000, number of
>>> retries =3, #bytes=12
30
>>>DEBUG: TCPClient reading 108 bytes
>>> KrbKdcReq send: #bytes read=108
>>> KrbKdcReq send: #bytes read=108
>>> KDCRep: init() encoding tag is 126 req type is 13
>>>KRBError:
sTime is Wed Sep 02 17:03:11 EDT 2009 1251925391000
suSec is 381067
error code is 7
error Message is Server not found in Kerberos database
realm is BCI.SAS.COM
sname is HTTP/WINDOWPAIN.bci.sas.com:8080
msgType is 30
KrbException: Server not found in Kerberos database (7)
at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:61)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:185)
at
sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:294)
at
sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:106)
at
sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:562)
at
sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:594)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:230)
at
sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:162)
at
org.apache.http.impl.auth.NegotiateScheme.authenticate(NegotiateScheme.java:152)
at
org.apache.http.client.protocol.RequestTargetAuthentication.process(RequestTargetAuthenti
cation.java:101)
at
org.apache.http.protocol.BasicHttpProcessor.process(BasicHttpProcessor.java:251)
at
org.apache.http.protocol.HttpRequestExecutor.preProcess(HttpRequestExecutor.java:168)
at
org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:39
3)
at
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
at
org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
at
org.apache.http.examples.client.KerberosHttpClient.main(KerberosHttpClient.java:124)
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.KDCRep.init(KDCRep.java:133)
at sun.security.krb5.internal.TGSRep.init(TGSRep.java:58)
at sun.security.krb5.internal.TGSRep.<init>(TGSRep.java:53)
at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:46)
... 15 more
> SPNEGO authentication scheme
> ----------------------------
>
> Key: HTTPCLIENT-523
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-523
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpAuth
> Affects Versions: Snapshot
> Environment: Operating System: All
> Platform: All
> Reporter: Mikael Wikström
> Priority: Minor
> Fix For: 4.1.0
>
> Attachments: bcsLogin.conf,
> CustomAuthenticationNegotiateExample.java,
> CustomAuthenticationNegotiateExample.java, httpclient4kerb20090710.zip,
> KerberosHttpClient.zip, NegotiateScheme.java, NegotiateScheme.java, run.sh,
> submitclient.tar.gz
>
>
> Consider integrating the SPNEGO auth scheme from Commons HttpClient contrib
> package into HttpClient 4.0
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
