[prev in list] [next in list] [prev in thread] [next in thread] 

List:       jboss-user
Subject:    [jboss-user] [Security] - Re: Problem with Negotiation-toolkit with
From:       nulltransfer <do-not-reply () jboss ! com>
Date:       2009-08-31 15:17:00
Message-ID: 31111860.1251731820834.JavaMail.jboss () nukes01 ! app ! mwc ! hst ! phx2 ! redhat ! com
[Download RAW message or body]

Lets begin by testing your keytab file.

Create a text file in C:\windows\krb5.ini with the following contents:

  | [libdefaults]
  | default_realm = COMPANY.NL
  | dns_lookup_realm = false
  | dns_lookup_kdc = false
  | default_tkt_enctypes=RC4-HMAC
  | default_tgs_enctypes=RC4-HMAC
  | 
  | [realms]
  | COMPANY.NL = {
  | kdc = 5.21.8.10
  | admin_server = 127.0.0.1
  | default_domain = COMPANY.NL
  | }
  | 
  | [domain_realm]
  | .company.nl = COMPANY.NL
  | company.nl = COMPANY.NL
  | 
  | [appdefaults]
  | autologin = true
  | forward = true
  | forwardable = true
  | encrypt = true
  | 

Edit the above contents to match your system.

Then open command prompt, and browser to your JAVA_HOME\bin.  Run the following command using kinit.exe:


  | Kinit <kerberos principal name>
  | 
e.g. kinit myuser@mycompany.nl  It will then prompt you for a password.


If that works, then test your keytab file by running the below command:


  | Kinit â € “k -t <keytab output path> <kerberos principal name> 
  | 

If your keytab is correct, you should get "new ticket stored in cache".


View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4252660#4252660

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4252660

_______________________________________________
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user

[prev in list] [next in list] [prev in thread] [next in thread]