You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Dain Sundstrom (Jira)" <ji...@apache.org> on 2020/02/07 14:41:00 UTC
[jira] [Commented] (DIRKRB-739) getDelegCred does not seem to work
with SimpleKdcServer
[ https://issues.apache.org/jira/browse/DIRKRB-739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17032410#comment-17032410 ]
Dain Sundstrom commented on DIRKRB-739:
---------------------------------------
I dug in a bit more. It doesn't work.
> getDelegCred does not seem to work with SimpleKdcServer
> -------------------------------------------------------
>
> Key: DIRKRB-739
> URL: https://issues.apache.org/jira/browse/DIRKRB-739
> Project: Directory Kerberos
> Issue Type: Bug
> Affects Versions: 2.0.0
> Reporter: Dain Sundstrom
> Priority: Major
>
> I'm using SimpleKdcServer for test standard Java GSS client/server authentication. This all works, but when I set `gssContext.requestCredDeleg(true)`on the client, the server side throws from `gssContext.getDelegCred()`:
> GSSException: No valid credentials provided
> at sun.security.jgss.krb5.Krb5Context.getDelegCred(Krb5Context.java:527)
> at sun.security.jgss.GSSContextImpl.getDelegCred(GSSContextImpl.java:614)
> at sun.security.jgss.spnego.SpNegoContext.getDelegCred(SpNegoContext.java:1095)
> at sun.security.jgss.GSSContextImpl.getDelegCred(GSSContextImpl.java:614)
>
> Are delegated credentials supposed to work with Kerby? If so is there is there a working test case?
> If they are supposed to work, I can write a reproduction, but wanted to check before doing the work.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org