From users-return-471-apmail-directory-users-archive=directory.apache.org@directory.apache.org Mon May 21 06:19:56 2007 Return-Path: Delivered-To: apmail-directory-users-archive@www.apache.org Received: (qmail 40411 invoked from network); 21 May 2007 06:19:55 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 21 May 2007 06:19:55 -0000 Received: (qmail 7057 invoked by uid 500); 21 May 2007 06:20:01 -0000 Delivered-To: apmail-directory-users-archive@directory.apache.org Received: (qmail 6992 invoked by uid 500); 21 May 2007 06:20:01 -0000 Mailing-List: contact users-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@directory.apache.org Delivered-To: mailing list users@directory.apache.org Delivered-To: moderator for users@directory.apache.org Received: (qmail 59755 invoked by uid 99); 21 May 2007 04:00:12 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: local policy) From: "Keith Shu" To: Subject: ApacheDS + Kerberos Date: Mon, 21 May 2007 11:56:12 +0800 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1250" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 Thread-Index: AcebW/h3BSd40P65Sfm7byBlJjmNYQ== X-Antivirus-Scanner: Clean mail though you should still use an Antivirus X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - perlis.mschosting.com X-AntiAbuse: Original Domain - directory.apache.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - nsys.com.my X-Source: X-Source-Args: X-Source-Dir: X-Virus-Checked: Checked by ClamAV on apache.org Message-Id: <20070521040005.6F29210FB015@herse.apache.org> I've been tinkering with ApacheDS 1.5.1 for the past couple of weeks. I've had some success with the LDAP directory but I'm having problems configuring ApacheDS to perform Kerberos authentication. I've not found any guides or tutorials available for kerberos configuration on apache DS. I might write one if I get it to work but I'm stuck. So far I've enabled kerberos and inserted some principals in the LDAP directory. I've tried testing using kinit and krb5LoginModule and I got as far as issuing the ticket but I got an exception encoding the ticket on the server side. (See below) Is there a guide available for Kerberos on ApacheDS? Something step by step would be nice. Please help! Thanks Keith --- [15:44:50] ERROR [org.apache.directory.server.kerberos.protocol.KerberosProtocolHandler] - /127.0.0.1:2127 EXCEPTION org.apache.mina.filter.codec.ProtocolEncoderException: java.lang.NullPointerException at org.apache.mina.filter.codec.ProtocolCodecFilter.filterWrite(ProtocolCodecFi lter.java:241) at org.apache.mina.common.support.AbstractIoFilterChain.callPreviousFilterWrite (AbstractIoFilterChain.java:445) at org.apache.mina.common.support.AbstractIoFilterChain.access$1500(AbstractIoF ilterChain.java:54) at org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.filterWrite (AbstractIoFilterChain.java:824) at org.apache.mina.filter.executor.ExecutorFilter.filterWrite(ExecutorFilter.ja va:271) -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.446 / Virus Database: 269.7.1/807 - Release Date: 5/16/2007 6:05 PM