I'm experimenting with JAAS authentication on Tomcat using Kerberos in
Windows.  For most people it works!  For one person so far I get the
following exception:

 

javax.security.auth.login.LoginException: KDC has no support for
encryption type (14)

 

She has a brand new Windows machine.

 

I've seen something about setting a registry value but I'm not sure what
is meant; on the tomcat server or on the individual's machine.  Setting
a registry value doesn't seem like a great solution to me.

 

The heart of the code that runs as a tomcat service is this:

 

            LoginContext lc = null;

            

            try {

                  String home = System.getenv("CATALINA_HOME");

                  System.setProperty("java.security.auth.login.config",
home + "/conf/jaas.conf"); 

                  System.setProperty("java.security.krb5.conf", home +
"/conf/krb5.conf");

                  

                lc = new LoginContext("JaasSample", this);

                lc.login();

            } catch (LoginException le) {

                  le.printStackTrace();

                return;

            } catch (SecurityException se) {

                  se.printStackTrace();

                return;

            }

 

 

Does anyone have any knowledge of this?  I should probably set the
system properties once at startup but I don't think that has anything to
do with the problem at hand.

 

 

 

 

 

_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to