We have kerberos token profile web service implemented - modified
wcftestservice example in .net.
.net client is working now - we had to fix spn on service

service wsdl
http://pastebin.com/eFHyCDFv

c:\windows\krb5.ini - so i don't have to set location
http://pastebin.com/QsYnUy7t

c:\kerberos\login.conf
http://pastebin.com/guAuri0z

client code uses wsdl2java generated code(not included)
http://pastebin.com/KDrWdqZE

Resulting in actually getting the right ticket but the code can't handle it
- not sure why
http://i.imgur.com/H2WGrdU.jpg

and stactrace
http://pastebin.com/rP5BcbpB

Am i missing something(parameter not set/doing something wrong) or is there
a bug?

Generally it fails inside KerberosSecurity class
Key sessionKey = krbCtx.getSecretKey();
if (sessionKey != null)
{
this.secretKey = new SecretKeySpec(sessionKey.getEncoded(),
sessionKey.getAlgorithm());
}
else
{
  KerberosTicket serviceTicket = getKerberosTicket(clientSubject, tgt); <<<
this returns null most likely
this.secretKey = serviceTicket.getSessionKey(); <<<here nullpointer then
}

Regards
Lucas Tobola

Reply via email to