cas + spnego+ logs

[m.garuti at quix.it]

Hi,

I'm trying to integrate cas server with activedirectory using spnego. 
After configuring all, clients do not authenticate.
Now i have only these logs..but i can't find out where is the problem.
Is possible to see more detailed logs info? If yes, how can do that?
What is the best approach to identificate these kerberos problems?

this is an example of logs:

2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.web.flow.InitialFlowSetupAction] - Action 
'InitialFlowSetupAction' beginning execution
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.web.support.CasArgumentExtractor] - Extractor did not 
generate service.
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.web.support.SamlArgumentExtractor] - Extractor did not 
generate service.
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.web.flow.InitialFlowSetupAction] - Action 
'InitialFlowSetupAction' completed execution; result is 'success'
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoNegociateCredentialsAction] 
- Action 'SpnegoNegociateCredentialsAction' beginning execution
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoNegociateCredentialsAction] 
- Action 'SpnegoNegociateCredentialsAction' completed execution; result 
is 'success'
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Action 
'SpnegoCredentialsAction' beginning execution
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - SPNEGO 
Authorization header found with 228 bytes
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - 
*Obtained token: NTLMSSP*
2008-05-12 18:36:36,656 DEBUG 
[org.jasig.cas.CentralAuthenticationServiceImpl] - *Attempting to create 
TicketGrantingTicket for Principal is null*
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Unable 
to obtain the output token required.
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - 
Setting HTTP Status to 401
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Action 
'SpnegoCredentialsAction' completed execution; result is 'error'
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 
'AuthenticationViaFormAction' beginning execution
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Executing setupForm
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Creating new form 
object with name 'credentials'
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Creating new 
instance of form object class [class 
org.jasig.cas.authentication.principal.UsernamePasswordCredentials]
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Putting form 
object of type [class 
org.jasig.cas.authentication.principal.UsernamePasswordCredentials] in 
scope Flow with name 'credentials'
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Creating new form 
errors for object with name 'credentials'
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - No property 
editor registrar set, no custom editors to register
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Putting form 
errors instance in scope Flash
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 
'AuthenticationViaFormAction' completed execution; result is 'success'
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 
'AuthenticationViaFormAction' beginning execution
2008-05-12 18:36:36,671 DEBUG 
[org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 
'AuthenticationViaFormAction' completed execution; result is 'success'


thanks
paco
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080512/e45d2447/attachment.html