Which versions of Java and OS? Which model of Mac?
-- GG
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden
This email sent to email@hidden
MacBookPro 2.33 Ghz Intel Core 2 blah blah
Most Most recent Java 1.5, which is the only1.5 which does GSSAPI at
all 'correctly'
java version "1.5.0_07"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_07-164)
Java HotSpot(TM) Client VM (build 1.5.0_07-87, mixed mode, sharing)
both eclipse and tomcat are using the same java, and the same gssapi
config file.
the file permissions on the keytabs are identical.
the keytab happily reads from w/in the eclipse env:
Debug is true storeKey false useTicketCache true useKeyTab true
doNotPrompt true ticketCache is /tmp/sakai_tcache.txt KeyTab is
/etc/leland/keytab.coursework refreshKrb5Config is false principal is
****/****@stanford.edu tryFirstPass is false useFirstPass is false
storePass is false clearPass is false
Acquire TGT from Cache
Principal is service/email@hidden
null credentials from Ticket Cache
>>> KeyTabInputStream, readName(): stanford.edu
>>> KeyTabInputStream, readName(): service
>>> KeyTabInputStream, readName(): coursework
>>> KeyTab: load() entry length: 58; type: 1
Added key: 1version: 3
Ordering keys wrt default_tkt_enctypes list
default etypes for default_tkt_enctypes: 1.
0: EncryptionKey: keyType=1 kvno=3 keyValue (hex dump)=
0000: 20 43 3D 2C 2F FB 6E 0D
principal's key obtained from the keytab
principal is service/email@hidden
Acquire TGT using AS Exchange
but from w/in tomcat:
INFO:
edu.stanford.coursework.bulkCourseCreation.jobs.Stan23xREMCTLtest@29f4d6:
Starting REMCTL test (2007-04-05 13:08:00,024
QuartzScheduler_Worker-1_edu.stanford.coursework.bulkCourseCreation.jobs.Stan23xREMCTLtest)
Debug is true storeKey false useTicketCache true useKeyTab true
doNotPrompt true ticketCache is /tmp/sakai_tcache.txt KeyTab is
/etc/leland/keytab.coursework refreshKrb5Config is false principal is
****/****@stanford.edu tryFirstPass is false useFirstPass is false
storePass is false clearPass is false
Acquire TGT from Cache
Principal is service/email@hidden
null credentials from Ticket Cache
Key for the principal service/email@hidden not available in
/etc/leland/keytab.coursework
[Krb5LoginModule] authentication failed
Unable to obtain password from user
>>>>>> LOGIN exception...
javax.security.auth.login.LoginException: Unable to obtain password from
user
The only difference which is starting to nibble at me is that w/in the
tomcat we're setting up multiple LoginContexts.
The application was happy with the LDAP and the Kerberos
authentication defintions, flipping back and forth using each as needed.
the second keytab based identity is the new bit.
the addition of the second keytab based identity is failing.
I'll move this to slowaris and see what happens. grrrr.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden
