Strange, it appears that there is no TGT credential available. What version
of CXF are you using?

Colm.

On Fri, Oct 31, 2014 at 3:21 PM, Łukasz Toboła <[email protected]>
wrote:

> We have kerberos token profile web service implemented - modified
> wcftestservice example in .net.
> .net client is working now - we had to fix spn on service
>
> service wsdl
> http://pastebin.com/eFHyCDFv
>
> c:\windows\krb5.ini - so i don't have to set location
> http://pastebin.com/QsYnUy7t
>
> c:\kerberos\login.conf
> http://pastebin.com/guAuri0z
>
> client code uses wsdl2java generated code(not included)
> http://pastebin.com/KDrWdqZE
>
> Resulting in actually getting the right ticket but the code can't handle it
> - not sure why
> http://i.imgur.com/H2WGrdU.jpg
>
> and stactrace
> http://pastebin.com/rP5BcbpB
>
> Am i missing something(parameter not set/doing something wrong) or is there
> a bug?
>
> Generally it fails inside KerberosSecurity class
> Key sessionKey = krbCtx.getSecretKey();
> if (sessionKey != null)
> {
> this.secretKey = new SecretKeySpec(sessionKey.getEncoded(),
> sessionKey.getAlgorithm());
> }
> else
> {
>   KerberosTicket serviceTicket = getKerberosTicket(clientSubject, tgt); <<<
> this returns null most likely
> this.secretKey = serviceTicket.getSessionKey(); <<<here nullpointer then
> }
>
> Regards
> Lucas Tobola
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Reply via email to