Authentication in windows with java

Scott Battaglia scott.battaglia at gmail.com
Thu Jan 4 15:55:10 EST 2007


I think you've seen this, but in case you haven't, does any of this help?
http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troubleshooting.html

-Scott

On 1/3/07, Geoffrey Ritchey <ritcheyg at wbu.edu> wrote:
>
>
>
>
>
> I'm experimenting with JAAS authentication on Tomcat using Kerberos in
> Windows.  For most people it works!  For one person so far I get the
> following exception:
>
>
>
> javax.security.auth.login.LoginException: KDC has no support for
> encryption type (14)
>
>
>
> She has a brand new Windows machine.
>
>
>
> I've seen something about setting a registry value but I'm not sure what
> is meant; on the tomcat server or on the individual's machine.  Setting a
> registry value doesn't seem like a great solution to me.
>
>
>
> The heart of the code that runs as a tomcat service is this:
>
>
>
>             LoginContext lc = *null*;
>
>
>
>             *try* {
>
>                   String home = System.*getenv*("CATALINA_HOME");
>
>                   System.*setProperty*("java.security.auth.login.config",
> home + "/conf/jaas.conf");
>
>                   System.*setProperty*("java.security.krb5.conf", home +
> "/conf/krb5.conf");
>
>
>
>                 lc = *new* LoginContext("JaasSample", *this*);
>
>                 lc.login();
>
>             } *catch* (LoginException le) {
>
>                   le.printStackTrace();
>
>                 *return*;
>
>             } *catch* (SecurityException se) {
>
>                   se.printStackTrace();
>
>                 *return*;
>
>             }
>
>
>
>
>
> Does anyone have any knowledge of this?  I should probably set the system
> properties once at startup but I don't think that has anything to do with
> the problem at hand.
>
>
>
>
>
>
>
>
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070104/d3b2d400/attachment.html


More information about the cas mailing list