Normal flow: klist you can see KRBTGT key if not try to run kinit some_domain_user type password and after klist you have to see KRBTGT in your cache. Start browser, firefox is easier to setup. Follow steps in tutorial for setting up firefox. Go to http://server/cas You can see successful login and after klist you can see HTTP/server ticket your cache.
My advice is. Start from clean setup. New tomcat, new CAS. Follow only steps in CAS SPNEGO tutorial. Add command line parameter for krb5.conf location. I will send you privately my config which work on my test setup. Pavel On Wed, Feb 2, 2011 at 6:15 PM, Romain LEGUAY <[email protected]> wrote: > Thanks so much for your answer. > > I think my config is correct know (I don't have any warnings). > Unfortunately, I can't connect to http://machine.domain:8080/cas: > the login page is displaying again. > Always the same message: > INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - > AuthenticationHandler: > org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler > failed to authenticate the user which provided the following credentials: > unknown> > > Do you think my host/client config can be the cause of the problem? > > Regards, > Romain > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
