hi, I configured CAS with SPNEGO, however it was failed (log below), returned HTTP Status 401, my questions is: 1. Obtained token: NTLMSSP xxxx: is it correct? 2. what is possible reasons for failed authentication? didn't call kerberos, or lacking of bean action, or wrong bean action defined in login-webflow.xml?
thanks. rgds brent 2017-05-17 08:37:21,538 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - SPNEGO Authorization header found with 56 bytes 2017-05-17 08:37:21,539 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Obtained token: NTLMSSP xxxxx 2017-05-17 08:37:21,547 DEBUG [org.springframework.transaction.annotation.AnnotationTransactionAttributeSource] - Adding transactional method 'CentralAuthenticationServiceImpl.createTicketGrantingTicket' with attribute: PROPAGATION_REQUIRED,ISOLATION_DEFAULT; '' 2017-05-17 08:37:21,554 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Returning cached instance of singleton bean 'transactionManager' 2017-05-17 08:37:21,554 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Creating new transaction with name [org.jasig.cas.CentralAuthenticationServiceImpl.createTicketGrantingTicket]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT; '' 2017-05-17 08:37:21,555 DEBUG [org.hibernate.internal.SessionImpl] - Opened session at timestamp: 14950246415 2017-05-17 08:37:21,555 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Opened new EntityManager [org.hibernate.ejb.EntityManagerImpl@117395ba] for JPA transaction 2017-05-17 08:37:21,555 DEBUG [org.hibernate.engine.transaction.spi.AbstractTransactionImpl] - begin 2017-05-17 08:37:21,555 DEBUG [org.hibernate.engine.jdbc.internal.LogicalConnectionImpl] - Obtaining JDBC connection 2017-05-17 08:37:21,556 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - initial autocommit status: true 2017-05-17 08:37:21,556 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - disabling autocommit 2017-05-17 08:37:21,556 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Exposing JPA transaction as JDBC transaction [org.springframework.orm.jpa.vendor.HibernateJpaDialect$HibernateConnectionHandle@506ef66f] 2017-05-17 08:37:21,567 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Returning cached instance of singleton bean 'timingAspect' 2017-05-17 08:37:21,573 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Returning cached instance of singleton bean 'auditTrailManagementAspect' 2017-05-17 08:37:21,645 DEBUG [org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler] - Setting nextToken in credential 2017-05-17 08:37:21,646 INFO [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - JCIFSSpnegoAuthenticationHandler failed authenticating unknown 2017-05-17 08:37:21,667 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Initiating transaction commit 2017-05-17 08:37:21,667 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Committing JPA transaction on EntityManager [org.hibernate.ejb.EntityManagerImpl@117395ba] 2017-05-17 08:37:21,667 DEBUG [org.hibernate.engine.transaction.spi.AbstractTransactionImpl] - committing 2017-05-17 08:37:21,669 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - committed JDBC Connection 2017-05-17 08:37:21,682 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - re-enabling autocommit 2017-05-17 08:37:21,682 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Closing JPA EntityManager [org.hibernate.ejb.EntityManagerImpl@117395ba] after transaction 2017-05-17 08:37:21,682 DEBUG [org.springframework.orm.jpa.EntityManagerFactoryUtils] - Closing JPA EntityManager 2017-05-17 08:37:21,682 DEBUG [org.hibernate.engine.jdbc.internal.LogicalConnectionImpl] - Released JDBC connection 2017-05-17 08:37:21,684 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Obtained output token: NTLMSSP xxxxxx 2017-05-17 08:37:21,684 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Setting HTTP Status to 401 -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/b91f6fdf-62e0-4911-802f-fbfea6050d98%40apereo.org.
