From dev-return-45428-apmail-directory-dev-archive=directory.apache.org@directory.apache.org Mon Apr 21 21:20:18 2014 Return-Path: X-Original-To: apmail-directory-dev-archive@www.apache.org Delivered-To: apmail-directory-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id DC638113C0 for ; Mon, 21 Apr 2014 21:20:18 +0000 (UTC) Received: (qmail 97991 invoked by uid 500); 21 Apr 2014 21:20:16 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 97888 invoked by uid 500); 21 Apr 2014 21:20:13 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Delivered-To: moderator for dev@directory.apache.org Received: (qmail 54913 invoked by uid 99); 21 Apr 2014 20:05:54 -0000 X-ASF-Spam-Status: No, hits=-2.8 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_HI,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) X-AuditID: cbfec37c-b7f796d000005f99-26-53557a049b7e From: Reid Varner To: "dev@directory.apache.org" Subject: [ApacheDS] [Studio] ApacheDS 2.0.0 and Kerberos Setup Thread-topic: [ApacheDS] [Studio] ApacheDS 2.0.0 and Kerberos Setup Thread-index: Ac9dnQGXhH9YCkanTRmLiA5Ld9dX+g== Date: Mon, 21 Apr 2014 20:05:23 +0000 Message-id: Accept-Language: en-US Content-language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: X-Originating-IP: [105.144.21.63] Content-type: multipart/alternative; boundary=_000_E142DF47290F1F49B5EC39D0D61D7F23F6E983sisaex02sj_ MIME-version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrALMWRmVeSWpSXmKPExsVy+t9hX12WqtBgg/vt4hYXJqk4MHo8XLyD MYAxissmJTUnsyy1SN8ugSvjae9K1oLj7hVTLmxla2Bscexi5OCQEDCRWN6g0sXICWSKSVy4 t56ti5GLQ0hgGaPE/e5mKGcVk8S63nusEM58RomOXwfZQVrYBDQk/jybCmaLCFhKvP3/iwnE Fhawk7i76i4rRNxZ4uiK6SwQtp7Eto4pjCA2i4CqRPeG42C9vAL2Ej+X3AerZwQ64/upNWBz mAXEJZpbb7JAnCcgsWTPeWYIW1Ti5eN/rBAfKEpsX20FUZ4m0f96MyvESEGJH5PvsUxgFJ6F ZNIsJGWzkJRBxHUkFuz+xAZha0ssW/iaGcY+c+AxE7L4Akb2VYxipcXJBcVJ6akVxnrFibnF pXnpesn5uZsYIbFSs4Px3lebQ4wCHIxKPLwSBqHBQqyJZcWVuYcYJTiYlUR416YBhXhTEiur Uovy44tKc1KLDzEycXBKNTA23FUqkZs4Peny/RPSnjLZlx+xX5VwdC9nXG2yavKa/08fxlsK rFj2je/xZE9lZ8dLB9fzZUSs22k3Ufr75b3Pyms5r/4MCGe5fCm/V17Be251Nl9Y77GsDT9W cjzy16ot91Oxu1afsdj3l0aXV7h3+7x587/wsj1aybF+WsEUH8dtj9ztqqSUWIozEg21mIuK EwGN3GREcwIAAA== X-Virus-Checked: Checked by ClamAV on apache.org --_000_E142DF47290F1F49B5EC39D0D61D7F23F6E983sisaex02sj_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, I am tasked with setting up an ApacheDS 2.0.0 LDAP + Kerberos (including KD= C) server for use in our testing environment. I followed this guide, b= ut am unable to successfully authenticate with my LDAP server using Kerbero= s as per the final step on that page. I am using Apache Directory Studio 2.0.0. When I have "Require Pre-Authentication By Encrypted TimeStamp" checked, I = get the error:javax.security.auth.login.LoginException: Integrity check on = decrypted field failed (31) When I uncheck that field, restart the server, and try to connect using Ker= beros, I get: javax.security.auth.login.LoginException: Checksum Failed I am sure the username and password I am supplying is correct. What could b= e the problem? Has anyone successfully set up ApacheDS 2.0.0 with Kerberos? Is there a guide I should be following somewhere? It seems the folks over at ApacheDS have yet to document configuration of the= ir Kerberos server. Any help would be much appreciated! Thanks, Reid --_000_E142DF47290F1F49B5EC39D0D61D7F23F6E983sisaex02sj_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello,

 

I am tasked with setting up an ApacheDS 2.0.0 LDAP &= #43; Kerberos (including KDC) server for use in our testing environment. I = followed = this guide, but am unable to successfully authenticate with my LDAP = server using Kerberos as per the final step on that page.=

I am using Apache Directory Studio 2.0.0.=

When I have "Require Pre-Authentication By Encr= ypted TimeStamp" checked, I get the error:javax.security.auth.login.LoginException: Integrity check on decrypted field failed (31)<= /span>

When I uncheck that field, restart the server, and t= ry to connect using Kerberos, I get:&= nbsp;javax.security.auth.= login.LoginException: Checksum Failed

I am sure the username and password I am supplying i= s correct. What could be the problem? Has anyone successfully set up Apache= DS 2.0.0 with Kerberos?

Is there a guide I should be following somewhere?

It seems the folks over at ApacheDS have yet to document configuration of their Kerberos server.

 

Any help would be much appreciated!

 

Thanks,

Reid

 

--_000_E142DF47290F1F49B5EC39D0D61D7F23F6E983sisaex02sj_--