Emmanuel,
Thanks for the new addition. Combined with the first section, it really provided a good overview and instructions to setup Kerberos in ApacheDS. I followed the section 4 instructions and with some tweaks, I was able to get to a point where it should've succeeded with the Kerberos authentication, but failed with an error I don't know why it occured. The error shown in the debug log was jvm 1 | [15:45:23] WARN [org.apache.directory.server.ldap.LdapProtocolHandler] - Unexpected excep tion forcing session to close: sending disconnect notice to client. jvm 1 | java.security.PrivilegedActionException: javax.security.sasl.SaslException: Failure to in itialize security context [Caused by GSSException: Invalid name provided (Mechanism level: Could not load configuration file C:\Windows\krb5.ini (The system cannot find the file specified))] jvm 1 | at java.security.AccessController.doPrivileged(Native Method) jvm 1 | at javax.security.auth.Subject.doAs(Unknown Source) jvm 1 | at org.apache.directory.server.ldap.handlers.bind.gssapi.GssapiMechanismHandler.hand leMechanism(GssapiMechanismHandler.java:74) jvm 1 | at org.apache.directory.server.ldap.handlers.request.BindRequestHandler.handleSaslAu th(BindRequestHandler.java:560) This happed at the binding stage after successfully obtaining the ticket from TGS. What baffles me is that why is it looking for Wnidow krb5.ini while I'm using all ApacheDS provided services? Was this a bug or I missed some configuration? Appreciate any help. Gang ________________________________ From: Emmanuel Lécharny [[email protected]] Sent: Tuesday, February 19, 2013 6:11 PM To: [email protected] Subject: Re: Broken link in ApacheDS 2.0 Kerberos User's Guide Le 2/19/13 10:35 PM, Yang, Gang CTR (US) a écrit : > Hi, > > > > I'm excited to have found the new ApacheDS 2.0 Kerberos User's Guide. However > after viewing the first section, What is Kerberos, the links to the > subsequent sections, Kerberos Configuration, Kerberos Administrations, etc. > seemed to have been broken. Are they available or the links are broken? The links are broken. It's a work in progress, I'm adding new pages atm. Check the site, I just committed chapter 4. -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com<http://www.iktek.com/>
