You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Eirik Bjorsnos (JIRA)" <ji...@apache.org> on 2014/02/26 12:31:19 UTC
[jira] [Commented] (DIRKRB-100) Active Directory support for
KdcConnection
[ https://issues.apache.org/jira/browse/DIRKRB-100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13912785#comment-13912785 ]
Eirik Bjorsnos commented on DIRKRB-100:
---------------------------------------
And here's the caused by stack trace:
Caused by: org.apache.directory.api.asn1.DecoderException: ERR_00001_BAD_TRANSITION_FROM_STATE Bad transition from state START_STATE, tag 0x0E
at org.apache.directory.api.asn1.ber.grammar.AbstractGrammar.executeAction(AbstractGrammar.java:125)
at org.apache.directory.api.asn1.ber.Asn1Decoder.treatTLVDoneState(Asn1Decoder.java:599)
at org.apache.directory.api.asn1.ber.Asn1Decoder.decode(Asn1Decoder.java:735)
at org.apache.directory.server.kerberos.protocol.codec.KerberosDecoder.decodeEncTgsRepPart(KerberosDecoder.java:680)
... 9 more
> Active Directory support for KdcConnection
> ------------------------------------------
>
> Key: DIRKRB-100
> URL: https://issues.apache.org/jira/browse/DIRKRB-100
> Project: Directory Kerberos
> Issue Type: Improvement
> Reporter: Eirik Bjorsnos
> Assignee: Emmanuel Lecharny
>
> I'm testing KdcConnection.getTgt() with Microsoft Active Directory.
> My first test failed with AD responding with first saying KRB5KRB_ERR_PREAUTH_REQUIRED (expected), then KRB5KRB_ERR_PREAUTH_FAILED (not expected).
> Since PREAUTH_FAILED is what you'll also get if your password is wrong, I enabled "Do not use pre authentication" for the account being tested and verified via kinit on OS X that no pre authentication was sent there.
> When testing getTgt with no preauth, I now get the following exception:
> Exception in thread "main" org.apache.directory.server.kerberos.changepwd.exceptions.ChangePasswordException: Request failed due to being malformed.
> at org.apache.directory.server.kerberos.protocol.codec.KerberosDecoder.decodeEncTgsRepPart(KerberosDecoder.java:684)
> at org.apache.directory.kerberos.client.KdcConnection._getTgt(KdcConnection.java:329)
> at org.apache.directory.kerberos.client.KdcConnection.getTgt(KdcConnection.java:181)
> at org.apache.directory.kerberos.client.KdcConnection.getTgt(KdcConnection.java:145)
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)