I recommend working directly with the 3.0.3-fixes branch. The error appears to be that no secret key is extracted from the kerberos token. If you still get the error with the latest CXF 3.0.x-fixes code, then make sure that BouncyCastle is installed.
If you are still getting the same error with BouncyCastle installed, then would it be possible to try with JDK 1.7 to see if this works (I know you can't use it, but it would narrow the problem area down). Colm. On Tue, Nov 18, 2014 at 5:48 PM, tobee <lukasz.tob...@gmail.com> wrote: > I tried with 3.0.2 myself and applied your fix - used 4 files you changed > http://pastebin.com/GqEHYsaS > > Did I pull wrong version? > > https://git-wip-us.apache.org/repos/asf?p=cxf.git;a=tag;h=3ec631c97e9eccf62490b176aab61044b3b9ab9f > > > > -- > View this message in context: > http://cxf.547215.n5.nabble.com/possible-wss4j-bug-tp5750539p5751265.html > Sent from the cxf-user mailing list archive at Nabble.com. > -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com