hi, I have an error when i try to authenticate on the CAS web site.
I create a keytab on my Windows Active Directory : ktpass.exe /out cas.keytab /princ HTTP/[email protected] /pass * /mapuser [email protected] /ptype KRB5_NT_PRINCIPAL /crypto all klist -k Keytab name: FILE:/opt/keytab/cas.keytab KVNO Principal ---- -------------------------------------------------------------------------- 3 HTTP/[email protected] 3 HTTP/[email protected] 3 HTTP/[email protected] 3 HTTP/[email protected] 3 HTTP/[email protected] kinit -k HTTP/[email protected] Ticket cache: FILE:/tmp/krb5cc_0 Default principal: HTTP/[email protected] Valid starting Expires Service principal 28/07/2016 10:48:40 28/07/2016 17:30:15 krbtgt/[email protected] on my login.conf i have : com.sun.security.jgss.krb5.initiate { com.sun.security.auth.module.Krb5LoginModule required debug=true storeKey=true useKeyTab=true keyTab="/opt/keytab/cas.keytab" principal="HTTP/[email protected]"; }; com.sun.security.jgss.krb5.accept { com.sun.security.auth.module.Krb5LoginModule required debug=true storeKey=true useKeyTab=true keyTab="/opt/keytab/cas.keytab" principal="HTTP/[email protected]"; }; On the cas log i have : ul 28 10:49:41 cas server: ... 152 more Jul 28 10:49:41 cas server: Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - RC4 with HMAC) Jul 28 10:49:41 cas server: at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:856) Jul 28 10:49:41 cas server: at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342) Jul 28 10:49:41 cas server: at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285) Jul 28 10:49:41 cas server: ... 158 more *Jul 28 10:49:41 cas server: Caused by: KrbException: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - RC4 with HMAC* Jul 28 10:49:41 cas server: at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:278) Jul 28 10:49:41 cas server: at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:149) Jul 28 10:49:41 cas server: at sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108) Jul 28 10:49:41 cas server: at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:829) Jul 28 10:49:41 cas server: ... 160 more Jul 28 10:49:41 cas server: 2016-07-28 10:49:41,283 INFO [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - <JcifsSpnegoAuthenticationHandler failed authenticating unknown> Jul 28 10:49:41 cas server: 2016-07-28 10:49:41,284 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN Jul 28 10:49:41 cas server: ============================================================= Jul 28 10:49:41 cas server: WHO: unknown Jul 28 10:49:41 cas server: WHAT: Supplied credentials: [unknown] Jul 28 10:49:41 cas server: ACTION: AUTHENTICATION_FAILED Jul 28 10:49:41 cas server: APPLICATION: CAS Jul 28 10:49:41 cas server: WHEN: Thu Jul 28 10:49:41 CEST 2016 Jul 28 10:49:41 cas server: CLIENT IP ADDRESS: 10.50.10.4 Jul 28 10:49:41 cas server: SERVER IP ADDRESS: 10.10.50.21 Jul 28 10:49:41 cas server: ============================================================= Jul 28 10:49:41 cas server: > Thanks for your help good day -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c7c9f8ee-a193-4aab-b55e-e6fb67095a01%40apereo.org. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
