directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Spark Shen" <>
Subject [kerberos] How to add client/server information into kerberos database
Date Thu, 29 Nov 2007 07:29:20 GMT

I am playing around with apacheds kerberos features these days. As you may
leo and I have some posts in the past few weeks. And thanks for your great
help. :-)

I configured apacheds[1] according to [2], and experimented with the short
form of 'Kerberos client components' [3].
Here below is my short form class:
public class SampleClient {

    public static void main(String[] args) throws UnknownHostException,
            IOException, KdcConnectionException {

        KerberosPrincipal clientPrincipal = new KerberosPrincipal(
        String userPassword = <passwd>;
        String hostname = <ip>;
        int port = 88;
        KdcConnection con = new KdcConnection(hostname + ":" + port);
        KerberosTicket tgt = con.getTicketGrantingTicket(clientPrincipal,


And the output:
log4j:WARN No appenders could be found for logger (
log4j:WARN Please initialize the log4j system properly.
Exception in thread "main" Client not
found in Kerberos database (6)
    at kerberos.SampleClient.main(

I did not find document about how to add client/server information to kdc
server ,
would any one give me a hand? Thanks in advance.

I did not find a verbose kerberos  administration instruction on the web
(I believe it's under development), so I have to come here to take some of
your precious time.

[1] My modification to <apacheds>\instances\default\conf\server.xml
<bean id="*environment*" ...>
  <property name="*properties*">
      <prop key="*kdc.entryBaseDn*">ou=users,dc=example,dc=com</prop>
   <bean id="*kdcConfiguration*" class="**" lazy-init="*
default*" autowire="*default*" dependency-check="*default*">
        <property name="*enabled*" value="*true*" />
       <property name="*ipPort*" value="*88*" />
<bean id="*configuration*" ...>
  <property name="*kdcConfiguration*" ref="*kdcConfiguration*" />


Spark Shen
China Software Development Lab, IBM

View raw message