Hi CAS Community,
At my work I have been requested see if we can configure CAS to
Authenticate with AD using SPNEGO, but I am getting the below exception. I
have tried a variety of things with no success.
I thinking there maybe an issue with regards to how the network is setup.
Basically the network address of the machine is some like this
devportal.cc.eee.aa, but the domain of the domain controller that I am
required to use for dev is domaindc1.devad,cc.eee.aa.
Basically the server is cc.eee.aa domain, but dc is devad.cc.eee.aa will
this even work.
2016-07-22 14:22:03,279 DEBUG
[org.jasig.cas.support.spnego.web.flow.SpnegoNegociateCredentialsAction] -
<Authorization header [NTLM
TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==], User Agent
header [Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML,
like Gecko) Chrome/51.0.2704.103 Safari/537.36]>
2016-07-22 14:22:03,285 DEBUG
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - <SPNEGO
Authorization header found with 56 bytes>
2016-07-22 14:22:03,292 DEBUG
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - <Obtained
token: NTLMSSP��>
2016-07-22 14:22:03,726 INFO
[org.jasig.cas.authentication.PolicyBasedAuthenticationManager] -
<JCIFSSpnegoAuthenticationHandler failed authenticating unknown>
2016-07-22 14:22:03,728 DEBUG
[org.jasig.cas.authentication.PolicyBasedAuthenticationManager] -
<JCIFSSpnegoAuthenticationHandler exception details: Error performing NTLM
authentication: jcifs.smb.SmbException: Failed to connect:
JCIFS192_30_1C<00>/XX.XX.XX.XX
jcifs.util.transport.TransportException
java.net.ConnectException: Connection refused
at java.net.PlainSocketImpl.socketConnect(Native Method)
at
java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
at
java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
at
java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:589)
at jcifs.smb.SmbTransport.ssn139(SmbTransport.java:196)
at jcifs.smb.SmbTransport.negotiate(SmbTransport.java:249)
at jcifs.smb.SmbTransport.doConnect(SmbTransport.java:322)
at jcifs.util.transport.Transport.run(Transport.java:241)
at java.lang.Thread.run(Thread.java:745)
at jcifs.util.transport.Transport.run(Transport.java:258)
at java.lang.Thread.run(Thread.java:745)
>
2016-07-22 14:22:03,742 DEBUG
[org.jasig.cas.audit.spi.TicketOrCredentialPrincipalResolver] - <Resolving
argument [SpnegoCredential] for audit>
Regards,
Colin
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/e44e185f-9852-4245-9a3b-81c50c406407%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.
