kerberos authentication

Former Member — Thu, 19 Oct 2006 07:43:25 GMT

diagtool is sending me information in log

com.sap.engine.config.diagtool.tests.authentication.krb.Krb5ServerTest

Info] Oct 19, 2006 9:22:52 AM >>> KDCRep: init() encoding tag is 126 req type is 11

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM >>>KRBError:

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM sTime is Thu Oct 19 09:22:54 CEST 2006 1161242574000

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM suSec is 489747

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM error code is 12

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM error Message is KDC policy rejects request

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM realm is ITE.LOCAL

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM sname is krbtgt/ITE.LOCAL

[Info] Oct 19, 2006 9:22:52 AM

[Info] Oct 19, 2006 9:22:52 AM [Krb5LoginModule] authentication failed

KDC policy rejects request (12)

[Info] Oct 19, 2006 9:22:52 AM

[Error] Oct 19, 2006 9:22:52 AM Error creating GSS context.

[EXCEPTION]

GSSException: No valid credentials provided (Mechanism level: Attempt to obtain new ACCEPT credentials failed!)

at sun.security.jgss.krb5.Krb5AcceptCredential.getKeyFromSubject(Krb5AcceptCredential.java:189)

at sun.security.jgss.krb5.Krb5AcceptCredential.getInstance(Krb5AcceptCredential.java:80)

at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:75)

at sun.security.jgss.GSSManagerImpl.getCredentialElement(GSSManagerImpl.java:149)

at sun.security.jgss.GSSCredentialImpl.add(GSSCredentialImpl.java:334)

at sun.security.jgss.GSSCredentialImpl.<init>(GSSCredentialImpl.java:44)

at sun.security.jgss.GSSManagerImpl.createCredential(GSSManagerImpl.java:102)

at com.sap.engine.config.diagtool.tests.authentication.krb.Krb5ServerTest.createGSSContext(Krb5ServerTest.java:104)

at com.sap.engine.config.diagtool.tests.authentication.krb.Krb5ServerTest.execute(Krb5ServerTest.java:75)

at com.sap.engine.config.diagtool.Task.execute(Task.java:46)

at com.sap.engine.config.diagtool.Launcher.run(Launcher.java:247)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at com.sap.engine.config.diagtool.Launcher.main(Launcher.java:271)

Caused by: javax.security.auth.login.LoginException: KDC policy rejects request (12)

at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:585)

at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:475)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)

at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)

at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)

at javax.security.auth.login.LoginContext.login(LoginContext.java:534)

at sun.security.jgss.LoginUtility.run(LoginUtility.java:57)

at java.security.AccessController.doPrivileged(Native Method)

at sun.security.jgss.krb5.Krb5AcceptCredential.getKeyFromSubject(Krb5AcceptCredential.java:186)

... 15 more

Caused by: KrbException: KDC policy rejects request (12)

at sun.security.krb5.KrbAsRep.<init>(DashoA12275:67)

at sun.security.krb5.KrbAsReq.getReply(DashoA12275:315)

at sun.security.krb5.Credentials.acquireTGT(DashoA12275:361)

at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:576)

... 29 more

Caused by: KrbException: Identifier doesn't match expected value (906)

at sun.security.krb5.internal.ah.a(DashoA12275:134)

at sun.security.krb5.internal.av.a(DashoA12275:63)

at sun.security.krb5.internal.av.<init>(DashoA12275:58)

at sun.security.krb5.KrbAsRep.<init>(DashoA12275:53)

... 32 more

[Error] Oct 19, 2006 9:22:52 AM Acquire credential failed for realm ITE.LOCAL

[Info] Oct 19, 2006 9:22:52 AM

com.sap.engine.config.diagtool.tests.authentication.krb.Krb5ClientTest

[Info] Oct 19, 2006 9:23:09 AM >>> KDCRep: init() encoding tag is 126 req type is 11

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM >>>KRBError:

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM sTime is Thu Oct 19 09:23:16 CEST 2006 1161242596000

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM suSec is 153622

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM error code is 24

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM error Message is Pre-authentication information was invalid

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM realm is ITE.LOCAL

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM sname is krbtgt/ITE.LOCAL

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM eData provided.

[Info] Oct 19, 2006 9:23:09 AM

[Info] Oct 19, 2006 9:23:09 AM [Krb5LoginModule] authentication failed

Pre-authentication information was invalid (24)

[Info] Oct 19, 2006 9:23:09 AM

[Error] Oct 19, 2006 9:23:09 AM Cannot login user.

[EXCEPTION]

javax.security.auth.login.LoginException: Pre-authentication information was invalid (24)

at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:585)

at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:475)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)

at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)

at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)

at javax.security.auth.login.LoginContext.login(LoginContext.java:534)

at com.sap.engine.config.diagtool.tests.authentication.krb.Krb5ClientTest.login(Krb5ClientTest.java:273)

at com.sap.engine.config.diagtool.tests.authentication.krb.Krb5ClientTest.getKrb5OutToken(Krb5ClientTest.java:311)

at com.sap.engine.config.diagtool.tests.authentication.krb.Krb5ClientTest.execute(Krb5ClientTest.java:195)

at com.sap.engine.config.diagtool.Task.execute(Task.java:46)

at com.sap.engine.config.diagtool.Launcher.run(Launcher.java:247)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at com.sap.engine.config.diagtool.Launcher.main(Launcher.java:271)

Caused by: KrbException: Pre-authentication information was invalid (24)

at sun.security.krb5.KrbAsRep.<init>(DashoA12275:67)

at sun.security.krb5.KrbAsReq.getReply(DashoA12275:315)

at sun.security.krb5.Credentials.acquireTGT(DashoA12275:361)

at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:576)

... 21 more

Caused by: KrbException: Identifier doesn't match expected value (906)

at sun.security.krb5.internal.ah.a(DashoA12275:134)

at sun.security.krb5.internal.av.a(DashoA12275:63)

at sun.security.krb5.internal.av.<init>(DashoA12275:58)

at sun.security.krb5.KrbAsRep.<init>(DashoA12275:53)

... 24 more

[Info] Oct 19, 2006 9:23:24 AM >>> KrbKdcReq send: #bytes read=151