Skip to Main Content

Java Security

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Krb5LoginModule with useTicketCache="true"

843811Jun 11 2003 — edited Jan 23 2006
Hi,

I am trying Jaas authentication using Krb5LoginModule and the configuration file is

  MyTest{
    com.sun.security.auth.module.Krb5LoginModule required
    useTicketCache="true" principal="username@MY.DOMAIN.COM" debug="true"
    ticketCache="'${user.home}${/}krb5cc_username'";
  };

With this configuration file and the ticket in the cache, on windows 2000 the program is asking for password everytime. But with linux I am getting authenticated. I dont see the reason why is this happening only on windows side. The output on the windows side comes with information


  Debug is true storeKey false useTicketCache true useKeyTab
  false doNotPrompt false ticketCache is 'C:\Documents and
  Settings\username\krb5cc_username' KeyTab is null principal
  is username@MYDOMAIN.COM tryFirstPass is false useFirstPass
  is false storePass is false clearPass is false

  Principal is username@MYDOMAIN.COM
  null credentials from Ticket Cache
  Kerberos password for username@MYDOMAIN.COM:


but when I checked where the information "null credentials from Ticket Cache", it is in the block of code from Krb5LoginModule. And from understanding the code this information is output to the console only when the sun.security.krb5.Credentials is null.

I checked with the same code in the Krb5LoginModule is really the Credentials is null

  sun.security.krb5.PrincipalName pName
    = new sun.security.krb5.PrincipalName("username@MYDOMAIN.COM");
  Credentials cred = Credentials.acquireTGTFromCache(pName, cacheName);

and I found the credentials are correctly loaded into the object. I am now out of ideas as what I am doing wrong to get this working. Can someone help me in this regard.

Thanks in Advance,
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Feb 20 2006
Added on Jun 11 2003
12 comments
2,639 views