[25051] in Kerberos
Re: Java GSS/Kerberos issue - Autheticating server
daemon@ATHENA.MIT.EDU (Seema Malkani)
Fri Dec 2 14:52:08 2005
Date: Fri, 02 Dec 2005 11:51:45 -0800
From: Seema Malkani <Seema.Malkani@Sun.COM>
In-reply-to: <438EF6A9.70903@anl.gov>
To: "Douglas E. Engert" <deengert@anl.gov>
Message-id: <4390A5D1.80903@sun.com>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii; format=flowed
Content-transfer-encoding: 7BIT
cc: Laurence Brockman <daceilo@gmail.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Douglas E. Engert wrote:
>
>
> Laurence Brockman wrote:
>
>> Tried that already too and received:
>>
>> GSSException: GSSException: No valid credentials provided (Mechanism
>> level:
>> Failed to find any Kerberos Key)
>
>
> Then you have to get the key into the keytab. This is the way a server
> works,
> It does not try and get a ticket.
Although it is recommended to use keytab for the server-end, Java
GSS/Kerberos does provide the flexibility to work without keytab at the
server-end. User can enter password for the service principal, and a key
will be generated. However, once you generate keytab, entering passwords
will not work; you'll need to reset the password for the service
principal in the KDC.
Seema
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
