Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (athena.apache.org: domain of eirbjo@gmail.com designates
 72.14.220.157 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:date:message-id:subject:from:to:content-type
         :content-transfer-encoding;
        b=KMC0hFEjAKVXKtxmQA1XTwaH/C/MF7g8x3O1QRq+BSiauv7+KDiMdwQ4gZmHxRaIbD
         HJIiFMCxTUAqM7rvTluhzJPRZfMFVBFcW/czu4cAPwgR9w4P687hn4nqbCmUOP1TQVXy
         QemMWB3M/uLOxWjUgQS+iD531edWeBCUvUghI=
MIME-Version: 1.0
Date: Sun, 7 Jun 2009 13:49:27 +0200
Message-ID: <34660cca0906070449hdb3b925l2be5cb178ff73517@mail.gmail.com>
Subject: State of Kerberos in 1.5.4
From: =?ISO-8859-1?Q?Eirik_Bj=F8rsn=F8s?= <eirbjo@gmail.com>
To: dev@directory.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hi guys,

I'm currently looking into creating a JUnit integration test of some
Kerberos/SPNego code in SVNSearch[1].

I had great success in the past using ApacheDS for the same purpose
when testing LDAP integration. The Kerberos support is giving me some
trouble though. The documentation[2] seems to be somewhat lacking and
out of sync with 1.5.4.

Anyway, what I've done so far is:

o Created a unit test that starts ApacheDS with a KdcServer and a
KeyDerivationInterceptor, pretty much copying SaslGssapiBindITest.java
in 1.5.4
o Added kdcConfig.setIpPort(8888); kdcConfig.start(); (Seems like I
need this to make the KDC server start)
o Configured my Mac to use localhost:8888 as the KDC for EXAMPLE.COM
o Run kinit hnelson@EXAMPLE.COM form the Terminal
o Got the error message: "Kerberos Login Failed: Client not found in
Kerberos database"
o Enabling debug logging in the Kerberos code I noticed that "Client
not found in Kerberos database" was actually caused by a
NotImplementedException thrown at
DirectoryPrincipalStore.getPrincipal(DirectoryPrincipalStore.java:95)

Is the Kerberos server actually not implemented in 1.5.4? Or is there
something wrong in the SaslGssapiBindITest setup code?

What are my alternatives? Use an earlier version of ApacheDS or wait
for the next release?

Thanks,
Eirik.

[1] http://svnsearch.org
[2] http://directory.apache.org/apacheds/1.5/54-kerberos-protocol-provider.html