Thanks for responding. I got this working by upgrading my java to jdk1.6 from 1.5. It looks like this version of java has many kerberos related fixes. Hope this helps someone.
On Wed, Aug 19, 2009 at 7:40 PM, Shi Yusen <[email protected]> wrote: > I'm not familiar with Windows Kerberos. As you have tried all the 4 > causes, I guess you should recheck the No.4 as it's mentioned DNS, make > sure your DNS is configured correctly for Kerberos protocol. > > Regards, > > Shi Yusen/Beijing Langhua Ltd. > > > 在 2009-08-19三的 12:04 -0700，Natarajan, Ramya写道： > > Hi, > > > > I am trying to authenticate to my Active Directory 2003 using > > kerberos. I have the jaas config file and krb5.conf file in place and > > CAS seems to be trying to authenticate. I get this error though - > > [Krb5LoginModule] authentication failed : Pre-authentication > > information was invalid (24) > > > > Can you please tell me what this error means and how to resolve this? > > I am very new to kerberos. > > This link had some suggestions and I have tried them all and with no > > luck. > > > http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troubleshooting.html > > > > thanks for your help. > > > > My jaas config file is > > CAS { > > com.sun.security.auth.module.Krb5LoginModule required debug=TRUE; > > }; > > > > My krb5.conf file is (XYZ is replaced with my actual realm name) > > [libdefaults] > > default_realm = XYZ.COM > > [domain_realm] > > watcher.xyz.com = XYZ.COM > > [realms] > > XYZ.COM = { > > kdc = director.xyz.com > > admin_server = director.xyz.com > > } > > -- > > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
