Re: root login not possible

Unfortunately, I don't have any Debian systems so I don't know what their default configuration looks like. Take a look in your /var/log/messages (or equivalent) and see if PAM is spitting out any useful information. If there are messages, paste them here with your PAM config. > Hello Mike,

Re: Cross Realm MIT <-> Active Directory

Thanks Markus One final question: which version of Windows 2003 are you using and which steps did you perform to set up the realm trust. Is it as I described? Just asking to be sure :) Markus Moeller wrote: > My krb5.conf file > > [libdefaults] > default_realm = UNIX.COM > dns_look

Re: root login not possible

On debian you'd want to look in /var/log/auth.log Can you kinit as root on this system? Also, try running a debug sshd vis: sshd -ddd -D -p 222 and connect with putty using: putty -P 222 [EMAIL PROTECTED] Read through the debug output and see if there is anything useful in there. < wrote: > Un

Re: JGSS: Integrity check on decrypted field failed (31)

What version of JDK are you using ? Sun's implementation of Java GSS includes support for SPNEGO starting from Java SE 6. Has the SPN been setup correctly ? Seema Michael B Allen wrote On 11/06/06 11:26,: >I wrote an SPNEGO Java Servlet Filter that decodes the SPNEGO token, >plucks out the krb

Re: JCE KeberosKey Class Enctype Name for RC4-HMAC?

The algorithm names for Kerberos RC4-HMAC encryption type are: - rc4-hmac - arcfour-hmac - arcfour-hmac-md5 Makes sure you have setup the Kerberos account and Kerberos configuration to use RC4-HMAC encryption type. Seema Michael B Allen wrote On 11/06/06 20:33,: >What is the algorithm name for

Incorrect Kerberos Auth Config File?

Hi Guru, I just finish setting up a kerberos authentication; however, I seem to have a problem to get my initial credential to work. I follow the step-by-step procedure in the url below & it still doesn't work. According to the error msg, it looks like my pam.conf & krb5.conf files don't configur

Re: JGSS: Integrity check on decrypted field failed (31)

Hi Seema, I have narrowed things down quite a bit. If I use Firefox which uses raw kerberos tokens I still get the same error which means that this has nothing to do with SPNEGO. If I run the Filter in Jetty on Linux it works. So there's something about Tomcat / Windows / Java on Windows. On site

Re: Incorrect Kerberos Auth Config File?

Chris, You might try changing your domian_realm section to look a little more like this: [domain_realm] whatever.com = WHATEVER.COM .whatever.com = WHATEVER.COM Eddie Chris cc wrote: Hi Guru, I just finish setting up a kerberos authentication; however, I seem to have a problem

Re: Incorrect Kerberos Auth Config File?

On Tue, Nov 07, 2006 at 02:10:20PM -0800, Chris cc wrote: > Hi Guru, > > I just finish setting up a kerberos authentication; however, I seem to > have a problem to get my initial credential to work. I follow the > step-by-step procedure in the url below & it still doesn't work. > According to the

Re: Incorrect Kerberos Auth Config File?

Will, I use sol 10 + latest patches. I have followed your suggestions and I'm still in the dark. I'm also not able to ping KDC as you ask. At this point, I have no ideas where else to troubleshoot. Any helps are really appreciated. Thanks, -Chris > > I'd like my AD users to be able to t

Re: Incorrect Kerberos Auth Config File?

On Tue, Nov 07, 2006 at 05:14:20PM -0800, Chris cc wrote: > Will, > > I use sol 10 + latest patches. I have followed your suggestions and I'm > still in the dark. I'm also not able to ping KDC as you ask. At this point, > I have no ideas where else to troubleshoot. Any helps are really appre

Re: JGSS: Integrity check on decrypted field failed (31)

I believe this problem must be a bug in Java for Windows. All of the GSS examples use the default credentials of the user running the server. I do not. I created a KerberosKey from a password and acquired the GSSCredential through Subject.doAsPriviledged. Again the Filter works on Linux this way j