Re: Delegation w/ Java

2006-09-06 Thread Seema Malkani
If you are using system property java.security.krb5.conf to specify the Kerberos configuration file, and have defined only rc4-hmac as the encryption type, but your AD account is configured for DES, you will get an error. Seema Michael B Allen wrote On 09/05/06 12:35,: On Tue, 05 Sep 2006

Re: Delegation w/ Java

2006-09-05 Thread Michael B Allen
On Tue, 05 Sep 2006 11:50:52 -0700 Seema Malkani [EMAIL PROTECTED] wrote: Support for RC4-HMAC is available starting from J2SE 5.0 Update 7. snip 3) Update Kerberos configuration file to include following: [libdefaults] default_tkt_enctypes = rc4-hmac default_tgs_enctypes = rc4-hmac Hi

Delegation w/ Java

2006-09-01 Thread Michael B Allen
I'm trying to get delegation to work from a Java servlet running on a Windows IIS machine but Credential.acquireTGTFromCache() is returning 'null'. Is this because Java 1.5 doesn't support RC4-HMAC? I cannot require all regular user accounts to be set for DES only. Is there anything I can do? The

Re: Delegation w/ Java

2006-09-01 Thread Michael B Allen
Upgrading to Java 1.5 update 8 fixed this particular issue for me (but I still haven't quite seen delegation working). Mike On Fri, 1 Sep 2006 12:37:12 -0400 (EDT) Michael B Allen [EMAIL PROTECTED] wrote: So the TGT is 'null'. If I use Java's kinit it works (at least on Linux it did last