[jira] Commented: (HTTPCLIENT-934) kerberos auth not working

["Vinod K V (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HTTPCLIENT-934?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12901055#action_12901055 ] 

Vinod K V commented on HTTPCLIENT-934:
--------------------------------------

I ran into the same kind of problem.

Web search threw this at me: http://hbaseblog.com/2010/07/21/up-and-running-with-secure-hadoop/.

See section Note for MIT Kerberos 1.8.1+.

{quote}
The latest JDK I've tested (1.6.0.20) is not aware of the configuration principal names,
and so it breaks parsing the config entries.
As a workaround, you can renew your krb ticket (kinit -R), which upon renewal rewrites the credential cache without the config entry
{quote}

The problem went away after doing a fresh kinit -R.

> kerberos auth not working
> -------------------------
>
>                 Key: HTTPCLIENT-934
>                 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-934
>             Project: HttpComponents HttpClient
>          Issue Type: Bug
>          Components: Examples, HttpClient
>    Affects Versions: 4.1 Alpha1
>            Reporter: Dennis Rieks
>            Priority: Minor
>
> Hi,
> i used org/apache/http/examples/client/ClientKerberosAuthentication.java to test kerberos authentication.
> My Setup:
> Apache2 on Debian (virtual machine "server4.kdctest.local") is setup to deliver kerberos authenticated content via http and https.
> The Kerberos kdc (virtual maschine "kdc.kdctest.local") also runs on debian.
> On my Desktop (ubuntu) i can use kinit/klist/kdestory to sign in on the kerberos domain and server4 only delivers content when signed on. 
> I used firefox (with extra settings for http in about:config) and curl (curl -k --negotiate -u : http://server4.kdctest.local/test.php) to test my kerberos setup.
> The Problem:
> ClientKerberosAuthentication always asks the username/password and dont care about kinit. Also there is always an http 401 error and no content is deliverd.
> I used the latest svn version of httpclient

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org