You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by "Yang, Gang CTR (US)" <ga...@mail.mil> on 2013/02/19 22:35:17 UTC

Broken link in ApacheDS 2.0 Kerberos User's Guide

Hi,



I'm excited to have found the new ApacheDS 2.0 Kerberos User's Guide. However after viewing the first section, What is Kerberos, the links to the subsequent sections, Kerberos Configuration, Kerberos Administrations, etc. seemed to have been broken. Are they available or the links are broken?



Thanks,

Gang

RE: Broken link in ApacheDS 2.0 Kerberos User's Guide

Posted by "Yang, Gang CTR (US)" <ga...@mail.mil>.
Emmanuel,



Thanks for the new addition. Combined with the first section, it really provided a good overview and instructions to setup Kerberos in ApacheDS.



I followed the section 4 instructions and with some tweaks, I was able to get to a point where it should've succeeded with the Kerberos authentication, but failed with an error I don't know why it occured. The error shown in the debug log was



jvm 1    | [15:45:23] WARN [org.apache.directory.server.ldap.LdapProtocolHandler] - Unexpected excep
tion forcing session to close: sending disconnect notice to client.
jvm 1    | java.security.PrivilegedActionException: javax.security.sasl.SaslException: Failure to in
itialize security context [Caused by GSSException: Invalid name provided (Mechanism level: Could not
 load configuration file C:\Windows\krb5.ini (The system cannot find the file specified))]
jvm 1    |      at java.security.AccessController.doPrivileged(Native Method)
jvm 1    |      at javax.security.auth.Subject.doAs(Unknown Source)
jvm 1    |      at org.apache.directory.server.ldap.handlers.bind.gssapi.GssapiMechanismHandler.hand
leMechanism(GssapiMechanismHandler.java:74)
jvm 1    |      at org.apache.directory.server.ldap.handlers.request.BindRequestHandler.handleSaslAu
th(BindRequestHandler.java:560)



This happed at the binding stage after successfully obtaining the ticket from TGS. What baffles me is that why is it looking for Wnidow krb5.ini while I'm using all ApacheDS provided services? Was this a bug or I missed some configuration?



Appreciate any help.

Gang

________________________________
From: Emmanuel Lécharny [elecharny@gmail.com]
Sent: Tuesday, February 19, 2013 6:11 PM
To: users@directory.apache.org
Subject: Re: Broken link in ApacheDS 2.0 Kerberos User's Guide

Le 2/19/13 10:35 PM, Yang, Gang CTR (US) a écrit :
> Hi,
>
>
>
> I'm excited to have found the new ApacheDS 2.0 Kerberos User's Guide. However after viewing the first section, What is Kerberos, the links to the subsequent sections, Kerberos Configuration, Kerberos Administrations, etc. seemed to have been broken. Are they available or the links are broken?
The links are broken. It's a work in progress, I'm adding new pages atm.

Check the site, I just committed chapter 4.


--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com<http://www.iktek.com/>


Re: Broken link in ApacheDS 2.0 Kerberos User's Guide

Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 2/19/13 10:35 PM, Yang, Gang CTR (US) a écrit :
> Hi,
>
>
>
> I'm excited to have found the new ApacheDS 2.0 Kerberos User's Guide. However after viewing the first section, What is Kerberos, the links to the subsequent sections, Kerberos Configuration, Kerberos Administrations, etc. seemed to have been broken. Are they available or the links are broken?
The links are broken. It's a work in progress, I'm adding new pages atm.

Check the site, I just committed chapter 4.


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com