jmeter-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Felix Schumacher <felix.schumac...@internetallee.de>
Subject Re: Using JMeter with Kerberos in Windows
Date Wed, 08 Oct 2014 07:53:02 GMT
Am 08.10.2014 04:54, schrieb James Lawson:
> Hi all,
> 
> I've only just subscribed so I hope this message is suitable!
> 
> I am attempting to run some performance testing against a Web 
> Application
> that we are running. The Web App uses Kerberos (my
> understanding/familiarity with Kerberos is limited and I'm unable to 
> access
> the Domain Controller to check settings. It's all a bit difficult).
> 
> We have an account that can access the application ok but when I try 
> and
> use the same account through JMeter I can't get a request to work.
> 
> Our krb5.conf and jaas.conf files follow:
> 
> krb5.conf
> -------------
> 
> [libdefaults]
> default_realm = TEST.NET
> dns_lookup_kdc = true
> dns_lookup_realm = true
> udp_preference_limit = 1
> [realms]
> TEST.NET = {
>         kdc = DC1.TEST.NET
>         default_domain = TEST.NET
> }
> [domain_realm]
> test.net = TEST
> .test.net = TEST
The domain on the right should be TEST.NET, but it will probably not 
change anything,
since your default_realm is TEST.NET.

> 
> jaas.conf
> -------------
> 
> JMeter {
>     com.sun.security.auth.module.Krb5LoginModule required
>     doNotPrompt=false
>     useKeyTab=false
>     storeKey=false
>     debug=true;
> };
> 
> I have an HTTP Authorization Manager in my JMeter test. It is 
> configured to
> have the following entries.
> 
> Base URL:
> Username: ITAdmin
> Password: <Password>
> Domain: test
> Realm: TEST.NET
> Mechanism: Kerberos
> 
> I have debugging turned on as you can see above and the debug 
> information
> is attached:
> 
> Debug is  true storeKey false useTicketCache false useKeyTab false
> doNotPrompt false ticketCache is null isInitiator true KeyTab is null
> refreshKrb5Config is false principal is null tryFirstPass is false
> useFirstPass is false storePass is false clearPass is false
>                 [Krb5LoginModule] user entered username: ITAdmin
> principal is ITAdmin@TEST.NET
> Commit Succeeded
> 
> So I'm assuming that the account is being found ok. But the test then 
> fails
> and I receive the following output in the JMeter logging Window:
> 
> 2014/10/08 13:33:55 INFO  - jmeter.engine.StandardJMeterEngine: Running 
> the
> test!
> 2014/10/08 13:33:55 INFO  - jmeter.samplers.SampleEvent: List of
> sample_variables: []
> 2014/10/08 13:33:55 INFO  - jmeter.gui.util.JMeterMenuBar:
> setRunning(true,*local*)
> 2014/10/08 13:33:55 INFO  - jmeter.engine.StandardJMeterEngine: 
> Starting
> ThreadGroup: 1 : Test HPS Group
> 2014/10/08 13:33:55 INFO  - jmeter.engine.StandardJMeterEngine: 
> Starting 1
> threads for group Test HPS Group.
> 2014/10/08 13:33:55 INFO  - jmeter.engine.StandardJMeterEngine: Thread 
> will
> continue on error
> 2014/10/08 13:33:55 INFO  - jmeter.threads.ThreadGroup: Starting thread
> group number 1 threads 1 ramp-up 1 perThread 1000.0 delayedStart=false
> 2014/10/08 13:33:55 INFO  - jmeter.threads.ThreadGroup: Started thread
> group number 1
> 2014/10/08 13:33:55 INFO  - jmeter.engine.StandardJMeterEngine: All 
> thread
> groups have been started
> 2014/10/08 13:33:55 INFO  - jmeter.threads.JMeterThread: Thread 
> started:
> Test HPS Group 1-1
> 2014/10/08 13:33:55 WARN  -
> org.apache.http.client.protocol.RequestTargetAuthentication: NEGOTIATE
> authentication error: No valid credentials provided (Mechanism level: 
> No
> valid credentials provided (Mechanism level: Fail to create credential.
> (63) - No service creds))
> 2014/10/08 13:33:55 WARN  -
> org.apache.http.client.protocol.RequestTargetAuthentication: NTLM
> authentication error: Credentials cannot be used for NTLM 
> authentication:
> org.apache.jmeter.protocol.http.control.AuthManager$NullCredentials
Could it be, that your server is offering NTLM negotiation only? Can you 
place a Tree View Listener in your testplan and
look in the sampler report for a Response Header named 
"WWW-Authenticate"?

Regards
  Felix

> 2014/10/08 13:33:55 INFO  - jmeter.threads.JMeterThread: Thread 
> finished:
> Test HPS Group 1-1
> 2014/10/08 13:33:55 INFO  - jmeter.engine.StandardJMeterEngine: 
> Notifying
> test listeners of end of test
> 2014/10/08 13:33:55 INFO  - jmeter.gui.util.JMeterMenuBar:
> setRunning(false,*local*)
> 
> I'm at a bit of a loss. I dont have enough experience around Kerberos 
> to be
> able to work out if my krb5.conf file is incomplete. Any assistance 
> would
> be much appreciated!
> 
> Regards,
> 
> James

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org


Mime
View raw message