Return-Path: X-Original-To: apmail-cxf-users-archive@www.apache.org Delivered-To: apmail-cxf-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 8A465C592 for ; Thu, 26 Apr 2012 08:49:59 +0000 (UTC) Received: (qmail 79874 invoked by uid 500); 26 Apr 2012 08:49:58 -0000 Delivered-To: apmail-cxf-users-archive@cxf.apache.org Received: (qmail 79628 invoked by uid 500); 26 Apr 2012 08:49:58 -0000 Mailing-List: contact users-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cxf.apache.org Delivered-To: mailing list users@cxf.apache.org Received: (qmail 79611 invoked by uid 99); 26 Apr 2012 08:49:57 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Apr 2012 08:49:57 +0000 X-ASF-Spam-Status: No, hits=0.6 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS,URI_HEX X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [85.115.56.190] (HELO cluster-b.mailcontrol.com) (85.115.56.190) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Apr 2012 08:49:49 +0000 Received: from smarthost.prod.cis.camelot ([213.146.190.205]) by rly20b.srv.mailcontrol.com (MailControl) with ESMTP id q3Q8nS5V019442 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 26 Apr 2012 09:49:28 +0100 Received: from vwcasp003.ad.camelotgroup.co.uk ([10.190.9.20] helo=smtp.ad.camelotgroup.co.uk) by smarthost.prod.cis.camelot with esmtp (Exim 4.63) (envelope-from ) id 1SNKOG-00024S-3R for users@cxf.apache.org; Thu, 26 Apr 2012 09:49:28 +0100 Received: from AWMBXP810.ad.camelotgroup.co.uk ([169.254.1.220]) by VWCASP003.ad.camelotgroup.co.uk ([10.190.9.20]) with mapi id 14.02.0283.003; Thu, 26 Apr 2012 09:49:23 +0100 From: John Baker To: "users@cxf.apache.org" Subject: RE: Kerberos and credential propagation Thread-Topic: Kerberos and credential propagation Thread-Index: AQHNIvsnJcfMp+hOsUy904bYnNXLMparo2yAgAEb2nD///CBAIAAETKg///2T4CAABPrYA== Date: Thu, 26 Apr 2012 08:49:22 +0000 Message-ID: <46A1799D05FA874A82AE0E1D5B0D17F2015362@AWMBXP810.ad.camelotgroup.co.uk> References: <1334669573633-5646577.post@n5.nabble.com> <2FBF7C58-E530-46B0-BB8D-2236F7A4113F@gmail.com> <1335368992005-5665237.post@n5.nabble.com> <46A1799D05FA874A82AE0E1D5B0D17F20152E4@AWMBXP810.ad.camelotgroup.co.uk> <1335427490981-5666967.post@n5.nabble.com> <46A1799D05FA874A82AE0E1D5B0D17F2015327@AWMBXP810.ad.camelotgroup.co.uk> <1335429101764-5667012.post@n5.nabble.com> In-Reply-To: <1335429101764-5667012.post@n5.nabble.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.190.21.1] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Scanned-By: MailControl 7.7.0.1 (www.mailcontrol.com) on 10.66.0.130 Yes, I see now. It looks fine. The failed to find key error is often associ= ated with a case issue, but I can see that your domain is in upper case and= that matches the krb5.conf: principal=3D"HTTP/_kerbisspoc-service.melkweg.tld@MELKWEG.TLD"; I would suggest trying to get rid of the krb5.conf file by setting the two = environment variables that specify a KDC and realm (the names escape me rig= ht now). -----Original Message----- From: Henk-Jan [mailto:h.visscher@cordares.nl]=20 Sent: 26 April 2012 09:32 To: users@cxf.apache.org Subject: RE: Kerberos and credential propagation How can I get (even) more debug information? See also http://cxf.547215.n5.nabble.com/Kerberos-and-credential-propagation-tp56465= 77p5665641.html -- View this message in context: http://cxf.547215.n5.nabble.com/Kerberos-and-= credential-propagation-tp5646577p5667012.html Sent from the cxf-user mailing list archive at Nabble.com. ***************************************************************************= *** The information contained in this email may be confidential. It is intended only for the use of the named recipient. If you are not the named recipient please delete this email and notify the sender of the delivery error. If you have received this email and are not the named recipient, any disclosure, reproduction, distribution or other dissemination or use of the information contained in this email is strictly prohibited. =20 The transmission of email cannot be guaranteed to be secure or error free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission. If verification is required please request a hard copy version. The Camelot group of companies includes: Camelot UK Lotteries Limited (reg. no 2822203), Camelot Business Solutions Limited (reg. no 07553982), Camelot Strategic Solutions Limited (reg. no 07553980), Camelot Global Services Limited (reg. no 02822300) and Camelot Commercial Services Limited (reg. no 06911097), all of which are registered in England and Wales and have their registered office at: Tolpits Lane Watford WD18 9RN Tel : 01923 425000 ***************************************************************************= ***