Return-Path: 
 <dev-return-39608-apmail-directory-dev-archive=directory.apache.org@directory.apache.org>
X-Original-To: apmail-directory-dev-archive@www.apache.org
Delivered-To: apmail-directory-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 5A4359521
	for <apmail-directory-dev-archive@www.apache.org>;
 Tue, 22 Nov 2011 12:54:34 +0000 (UTC)
Received: (qmail 42906 invoked by uid 500); 22 Nov 2011 12:54:34 -0000
Delivered-To: apmail-directory-dev-archive@directory.apache.org
Received: (qmail 42857 invoked by uid 500); 22 Nov 2011 12:54:34 -0000
Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@directory.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@directory.apache.org>
List-Post: <mailto:dev@directory.apache.org>
List-Id: <dev.directory.apache.org>
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Delivered-To: mailing list dev@directory.apache.org
Received: (qmail 42846 invoked by uid 99); 22 Nov 2011 12:54:34 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 22 Nov 2011 12:54:34 +0000
X-ASF-Spam-Status: No, hits=1.5 required=5.0
	tests=FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of akarasulu@gmail.com designates
 74.125.82.42 as permitted sender)
Received: from [74.125.82.42] (HELO mail-ww0-f42.google.com) (74.125.82.42)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 22 Nov 2011 12:54:25 +0000
Received: by wwe3 with SMTP id 3so7183776wwe.1
        for <dev@directory.apache.org>; Tue, 22 Nov 2011 04:54:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=mime-version:sender:date:x-google-sender-auth:message-id:subject
         :from:to:content-type;
        bh=6SWB6eD0eS8Ug40fUfNNCdWCTK5nuk5HRVPREtLfM5I=;
        b=YzAVRvi4pd0pT4pxLEZplSiOR087sROZs5zuvF7QhfaWvDU4Lss9GACH2hoQedxnvD
         RV7W73IXQ1vMoueJcErKHVlJZrf4VrF5DHbX0ZC5I7khInMrqQzU+9ix40KX6AgOVlTq
         2784X2VRmWpqk4d/FaQ5VE+XbUHAE5qReT3Po=
MIME-Version: 1.0
Received: by 10.216.229.68 with SMTP id g46mr2813249weq.100.1321966445620;
 Tue, 22 Nov 2011 04:54:05 -0800 (PST)
Sender: akarasulu@gmail.com
Received: by 10.180.105.193 with HTTP; Tue, 22 Nov 2011 04:54:05 -0800 (PST)
Date: Tue, 22 Nov 2011 14:54:05 +0200
X-Google-Sender-Auth: yKWfVlHiQVoDHd7soIAwfmJ0Pzk
Message-ID: 
 <CADwPi+GR-cAWNNkrorzvyewwvSdAfUj3fBphCW_U5mUzbUvvUw@mail.gmail.com>
Subject: [ApacheDS] [Kerberos] Any idea on how we solve this issue with the
 missing encryption types?
From: Alex Karasulu <akarasulu@apache.org>
To: Apache Directory Developers List <dev@directory.apache.org>
Content-Type: multipart/alternative; boundary=0016e65873d665703e04b2524c9d
X-Virus-Checked: Checked by ClamAV on apache.org

--0016e65873d665703e04b2524c9d
Content-Type: text/plain; charset=ISO-8859-1

Hi all,

Seems I'm getting the following failure with the kerberos-test module in
the apacheds trunk due to a lack of supported encryption types when using
the JDK Krb5 login module. The build is on an Ubuntu machine:

akarasulu@stein:~$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=11.10
DISTRIB_CODENAME=oneiric
DISTRIB_DESCRIPTION="Ubuntu 11.10"

with the following Maven + Java setup:

akarasulu@stein:~$ mvn -v
Apache Maven 3.0.3 (r1075438; 2011-02-28 19:31:09+0200)
Maven home: /opt/tools/maven/default
Java version: 1.6.0_26, vendor: Sun Microsystems Inc.
Java home: /usr/lib/jvm/java-6-sun-1.6.0.26/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "3.0.0-12-generic", arch: "amd64", family: "unix"

Here's the failing test:

org.apache.directory.server.kerberos.kdc.KerberosTcpITest.testObtainTickets_AES256()

 ... and the stack trace ...

  <testcase time="0.05"
classname="org.apache.directory.server.kerberos.kdc.KerberosTcpITest"
name="testObtainTickets_AES256">
    <error message="No supported encryption types listed in
default_tkt_enctypes"
type="javax.security.auth.login.LoginException">javax.security.auth.login.LoginException:
No supported encryption types listed in default_tkt_enctypes
        at
com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:696)
        at
com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:542)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at
javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
        at
javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
        at
javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
        at java.security.AccessController.doPrivileged(Native Method)
        at
javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
        at
javax.security.auth.login.LoginContext.login(LoginContext.java:579)
        at
org.apache.directory.server.kerberos.kdc.KerberosTestUtils.obtainTGT(KerberosTestUtils.java:295)
        at
org.apache.directory.server.kerberos.kdc.AbstractKerberosITest.testObtainTickets(AbstractKerberosITest.java:121)
        at
org.apache.directory.server.kerberos.kdc.KerberosTcpITest.testObtainTickets_AES256(KerberosTcpITest.java:130)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

 SNIP ...

Caused by: KrbException: No supported encryption types listed in
default_tkt_enctypes
        at
sun.security.krb5.internal.crypto.EType.getDefaults(EType.java:221)
        at sun.security.krb5.KrbAsReq.init(KrbAsReq.java:335)
        at sun.security.krb5.KrbAsReq.&lt;init&gt;(KrbAsReq.java:259)
        at sun.security.krb5.KrbAsReq.&lt;init&gt;(KrbAsReq.java:61)
        at sun.security.krb5.Credentials.sendASRequest(Credentials.java:391)
        at sun.security.krb5.Credentials.acquireTGT(Credentials.java:350)
        at
com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:662)
        ... 49 more

So what should we do because this test will always fail on this Jvm? Should
I just ignore it until a reliable test is created?

-- 
Best Regards,
-- Alex

--0016e65873d665703e04b2524c9d
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi all,<div><br></div><div>Seems I&#39;m getting the following failure with=
 the kerberos-test module in the apacheds trunk due to a lack of supported =
encryption types when using the JDK Krb5 login module. The build is on an U=
buntu machine:</div>
<div><br></div><div><div>akarasulu@stein:~$ cat /etc/lsb-release=A0</div><d=
iv>DISTRIB_ID=3DUbuntu</div><div>DISTRIB_RELEASE=3D11.10</div><div>DISTRIB_=
CODENAME=3Doneiric</div><div>DISTRIB_DESCRIPTION=3D&quot;Ubuntu 11.10&quot;=
</div>
<div><br></div><div>with the following Maven + Java setup:</div><div><br></=
div><div><div>akarasulu@stein:~$ mvn -v</div><div>Apache Maven 3.0.3 (r1075=
438; 2011-02-28 19:31:09+0200)</div><div>Maven home: /opt/tools/maven/defau=
lt</div>
<div>Java version: 1.6.0_26, vendor: Sun Microsystems Inc.</div><div>Java h=
ome: /usr/lib/jvm/java-6-sun-1.6.0.26/jre</div><div>Default locale: en_US, =
platform encoding: UTF-8</div><div>OS name: &quot;linux&quot;, version: &qu=
ot;3.0.0-12-generic&quot;, arch: &quot;amd64&quot;, family: &quot;unix&quot=
;</div>
</div><div><br></div><div>Here&#39;s the failing test:</div><div><br></div>=
<div>org.apache.directory.server.kerberos.kdc.KerberosTcpITest.testObtainTi=
ckets_AES256()</div><div><br></div><div>=A0... and the stack trace ...</div=
>
<div><br></div><div><div>=A0 &lt;testcase time=3D&quot;0.05&quot; classname=
=3D&quot;org.apache.directory.server.kerberos.kdc.KerberosTcpITest&quot; na=
me=3D&quot;testObtainTickets_AES256&quot;&gt;</div><div>=A0 =A0 &lt;error m=
essage=3D&quot;No supported encryption types listed in default_tkt_enctypes=
&quot; type=3D&quot;javax.security.auth.login.LoginException&quot;&gt;javax=
.security.auth.login.LoginException: No supported encryption types listed i=
n default_tkt_enctypes</div>
<div>=A0 =A0 =A0 =A0 at com.sun.security.auth.module.Krb5LoginModule.attemp=
tAuthentication(Krb5LoginModule.java:696)</div><div>=A0 =A0 =A0 =A0 at com.=
sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:542)</d=
iv><div>=A0 =A0 =A0 =A0 at sun.reflect.NativeMethodAccessorImpl.invoke0(Nat=
ive Method)</div>
<div>=A0 =A0 =A0 =A0 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeM=
ethodAccessorImpl.java:39)</div><div>=A0 =A0 =A0 =A0 at sun.reflect.Delegat=
ingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)</div><di=
v>=A0 =A0 =A0 =A0 at java.lang.reflect.Method.invoke(Method.java:597)</div>
<div>=A0 =A0 =A0 =A0 at javax.security.auth.login.LoginContext.invoke(Login=
Context.java:769)</div><div>=A0 =A0 =A0 =A0 at javax.security.auth.login.Lo=
ginContext.access$000(LoginContext.java:186)</div><div>=A0 =A0 =A0 =A0 at j=
avax.security.auth.login.LoginContext$4.run(LoginContext.java:683)</div>
<div>=A0 =A0 =A0 =A0 at java.security.AccessController.doPrivileged(Native =
Method)</div><div>=A0 =A0 =A0 =A0 at javax.security.auth.login.LoginContext=
.invokePriv(LoginContext.java:680)</div><div>=A0 =A0 =A0 =A0 at javax.secur=
ity.auth.login.LoginContext.login(LoginContext.java:579)</div>
<div>=A0 =A0 =A0 =A0 at org.apache.directory.server.kerberos.kdc.KerberosTe=
stUtils.obtainTGT(KerberosTestUtils.java:295)</div><div>=A0 =A0 =A0 =A0 at =
org.apache.directory.server.kerberos.kdc.AbstractKerberosITest.testObtainTi=
ckets(AbstractKerberosITest.java:121)</div>
<div>=A0 =A0 =A0 =A0 at org.apache.directory.server.kerberos.kdc.KerberosTc=
pITest.testObtainTickets_AES256(KerberosTcpITest.java:130)</div><div>=A0 =
=A0 =A0 =A0 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<=
/div><div><br>
</div><div>=A0SNIP ...</div><div><br></div><div>Caused by: KrbException: No=
 supported encryption types listed in default_tkt_enctypes</div><div>=A0 =
=A0 =A0 =A0 at sun.security.krb5.internal.crypto.EType.getDefaults(EType.ja=
va:221)</div>
<div>=A0 =A0 =A0 =A0 at sun.security.krb5.KrbAsReq.init(KrbAsReq.java:335)<=
/div><div>=A0 =A0 =A0 =A0 at sun.security.krb5.KrbAsReq.&amp;lt;init&amp;gt=
;(KrbAsReq.java:259)</div><div>=A0 =A0 =A0 =A0 at sun.security.krb5.KrbAsRe=
q.&amp;lt;init&amp;gt;(KrbAsReq.java:61)</div>
<div>=A0 =A0 =A0 =A0 at sun.security.krb5.Credentials.sendASRequest(Credent=
ials.java:391)</div><div>=A0 =A0 =A0 =A0 at sun.security.krb5.Credentials.a=
cquireTGT(Credentials.java:350)</div><div>=A0 =A0 =A0 =A0 at com.sun.securi=
ty.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:6=
62)</div>
<div>=A0 =A0 =A0 =A0 ... 49 more</div></div><div><br></div><div>So what sho=
uld we do because this test will always fail on this Jvm? Should I just ign=
ore it until a reliable test is created?</div><div><br></div>-- <br><div>Be=
st Regards,</div>
<div>-- Alex</div><br>
</div>

--0016e65873d665703e04b2524c9d--