You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by Emmanuel Lécharny <el...@gmail.com> on 2013/03/08 17:59:28 UTC

Kerberos errors on Mac...

Hi guys,

today, I spent hours trying to get Studio on Mac connecting to a
kerberos server on linux, with no success :/

As soon as Studio was installed on a linux box, magically, it worked.

I suspect that either there is a serious bug in the Apple JDK, or that
we have a problem with the encryption algorithm (the order in which they
are sent is not the same on linux and mac, plus the selected algo is not
the same too).

I'm continuing my investigations...

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Kerberos errors on Mac...

Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 3/8/13 6:22 PM, Kiran Ayyagari a écrit :
> On Fri, Mar 8, 2013 at 10:29 PM, Emmanuel Lécharny <el...@gmail.com>wrote:
>
>> Hi guys,
>>
>> today, I spent hours trying to get Studio on Mac connecting to a
>> kerberos server on linux, with no success :/
>>
>> As soon as Studio was installed on a linux box, magically, it worked.
>>
>> I suspect that either there is a serious bug in the Apple JDK, or that
>>
> yes, I think so based on this[1]

Here is a more detailed information :
http://openjdk.5641.n7.nabble.com/OpenJDK-krb5-ignore-etc-krb5-conf-td75016.html


-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com

Re: Kerberos errors on Mac...

Posted by Kiran Ayyagari <ka...@apache.org>.
On Fri, Mar 8, 2013 at 10:29 PM, Emmanuel Lécharny <el...@gmail.com>wrote:

> Hi guys,
>
> today, I spent hours trying to get Studio on Mac connecting to a
> kerberos server on linux, with no success :/
>
> As soon as Studio was installed on a linux box, magically, it worked.
>
> I suspect that either there is a serious bug in the Apple JDK, or that
>
yes, I think so based on this[1]

> we have a problem with the encryption algorithm (the order in which they
> are sent is not the same on linux and mac, plus the selected algo is not
> the same too).
>
the choice of order of encryption types may differ from client to client
depending on the
platform, so I treat this as plain normal

>
> I'm continuing my investigations...
>
> --
> Regards,
> Cordialement,
> Emmanuel Lécharny
> www.iktek.com
>
>
[1]
http://java.net/projects/macosx-port/lists/issues/archive/2011-10/message/673

-- 
Kiran Ayyagari
http://keydap.com