[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #5 from Mark Thomas ma...@apache.org --- A short update. I can reproduce this with Tomcat 8 and both the latest Java 7 and Java 8 releases. I have a patch that fixes this but it currently depends on an internal Sun API. I am

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #6 from Mark Thomas ma...@apache.org --- I've done a little svn archeology. Originally, the SPNEGO authenticate did call Realm.authenticate using Subject.doAs(). That was removed as it wasn't necessary early in the SPNEGO

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #7 from Detelin Yordanov detelinyorda...@gmail.com --- Thanks Mark, The patch I tested with that proved to work was similar, I have not done any tests with IBM JDK though. Should the following note in Windows Auth How-to be

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #8 from Mark Thomas ma...@apache.org --- This has now been fixed in 7.0.x for 7.0.57 onwards. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 Mark Thomas ma...@apache.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-29 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #4 from Detelin Yordanov detelinyorda...@gmail.com --- I managed to overcome this error by setting -Djavax.security.auth.useSubjectCredsOnly=false Still, I would like to know if there is a reason not to use Subject.doAs when

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #1 from Detelin Yordanov detelinyorda...@gmail.com --- Created attachment 32060 -- https://issues.apache.org/bugzilla/attachment.cgi?id=32060action=edit Tomcat Kerberos configuration -- You are receiving this mail because:

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #2 from Detelin Yordanov detelinyorda...@gmail.com --- Created attachment 32061 -- https://issues.apache.org/bugzilla/attachment.cgi?id=32061action=edit Tomcat configuration -- You are receiving this mail because: You are

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #3 from Detelin Yordanov detelinyorda...@gmail.com --- Created attachment 32062 -- https://issues.apache.org/bugzilla/attachment.cgi?id=32062action=edit Error log -- You are receiving this mail because: You are the assignee

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 Detelin Yordanov detelinyorda...@gmail.com changed: What|Removed |Added OS||All