Integrating Kerberos with a Java application using JAAS

2020-06-12 Thread Aparajita Singh
Hi, We are trying to migrate an unauthenticated zookeeper cluster to a kerberos authenticated one. This guide was followed for configuring kerberos on zookeeper and this

Re: Integrating Kerberos with a Java application using JAAS

2020-06-12 Thread Greg Hudson
On 6/12/20 10:05 AM, Aparajita Singh wrote: > [Caused by GSSException: Failure unspecified at GSS-API level (Mechanism > level: Invalid argument (400) - Cannot find key of appropriate type to > decrypt AP REP - AES256 CTS mode with HMAC SHA1-96)] Most likely the long-term key of the service as see

Re: Integrating Kerberos with a Java application using JAAS

2020-06-12 Thread Aparajita Singh
Thanks Greg for the quick response. I don't need to use the same principal name for client and server. I had initially configured the server to use principal name "host/ stage-kdc-zk-2f...@stage.fdp.kafka" but I could see in krb5kdc log file that when the client tried to request data from the serv