I'm not familiar with Windows Kerberos. As you have tried all the 4 causes, I guess you should recheck the No.4 as it's mentioned DNS, make sure your DNS is configured correctly for Kerberos protocol.
Regards, Shi Yusen/Beijing Langhua Ltd. 在 2009-08-19三的 12:04 -0700,Natarajan, Ramya写道: > Hi, > > I am trying to authenticate to my Active Directory 2003 using > kerberos. I have the jaas config file and krb5.conf file in place and > CAS seems to be trying to authenticate. I get this error though - > [Krb5LoginModule] authentication failed : Pre-authentication > information was invalid (24) > > Can you please tell me what this error means and how to resolve this? > I am very new to kerberos. > This link had some suggestions and I have tried them all and with no > luck. > http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troubleshooting.html > > thanks for your help. > > My jaas config file is > CAS { > com.sun.security.auth.module.Krb5LoginModule required debug=TRUE; > }; > > My krb5.conf file is (XYZ is replaced with my actual realm name) > [libdefaults] > default_realm = XYZ.COM > [domain_realm] > watcher.xyz.com = XYZ.COM > [realms] > XYZ.COM = { > kdc = director.xyz.com > admin_server = director.xyz.com > } > -- > You are currently subscribed to [email protected] as: [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
