Mailing-List: contact user-help@jmeter.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "JMeter Users List" <user@jmeter.apache.org>
Received-SPF: pass (nike.apache.org: local policy)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
 format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 16 Jan 2015 09:01:23 +0100
From: Felix Schumacher <felix.schumacher@internetallee.de>
To: JMeter Users List <user@jmeter.apache.org>
Subject: Re: Jmeter user authentication over Kerberos not succeeding
In-Reply-To: 
 <CAM0S9o5N82NM1dq9n5bp_1cO9ARzn1HpgrVDU91bTXrFPFhKBg@mail.gmail.com>
References: 
 <CAM0S9o5N82NM1dq9n5bp_1cO9ARzn1HpgrVDU91bTXrFPFhKBg@mail.gmail.com>
Message-ID: <c7cedcf2fbecf6e63463e249804821d7@www.internetallee.de>
User-Agent: Roundcube Webmail/1.0.0

Am 15.01.2015 22:48, schrieb Martijn de Vrieze:
> I have been struggling somewhat with JMeter and kerberos lately. Google 
> so
> far has not been able to help me out with the issue I am facing.
> 
> The system under test is a Microsoft CRM 2013 platform, up until a few 
> days
> ago my tests worked fine since basic auth was switched on. However on 
> the
> most recent drop with changes they also switched over to kerberos auth
> only.
> 
> I have:
>  * filled in the KRB5.CONF with all relevant information
>  * HTTP AUTH Manager in the script with base URL, username, password,
> domain and KERBEROS filled in
> * HTTP Request defaults to ensure and enforce HTTP4 use, HTTPS over 
> port
> 443 and the same base URL all over the place
> 
> However I cannot get it to work properly, logging in simply refuses to 
> work
> for me. I'd really appreciate some help here, I use Jmeter fairly 
> often,
> with this I am however completely stuck.
> 
> When running the first step, which instantly receives the KERBEROS ath
> request I get the following in my logs:
> 
> 2015/01/15 17:13:02 INFO  - jmeter.threads.JMeterThread: Thread 
> started:
> Jmeter 1-1
> 2015/01/15 17:13:02 INFO  - jmeter.services.FileServer: Stored: 
> users.csv
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.CacheManager:
> GET(OAH) http://tst-crm20.test.nl/TEST/main.aspx null
> 2015/01/15 17:13:02 DEBUG - 
> jmeter.protocol.http.control.HC4CookieHandler:
> Found 0 cookies for http://tst-crm20.test.nl/TEST/main.aspx
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.CacheManager:
> inCache http://tst-crm20.test.nl/TEST/main.aspx null
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Target URL strings to match against: 
> http://tst-crm20.test.nl/TEST/main.aspx
>  and http://tst-crm20.test.nl:80/TEST/main.aspx
> <http://tst-crm20.test.nl/TEST/main.aspx>
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Checking match against auth'n entry: http://tst-crm20.test.nl
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Matched
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Target URL strings to match against: 
> http://tst-crm20.test.nl/TEST/main.aspx
>  and http://tst-crm20.test.nl:80/TEST/main.aspx
> <http://tst-crm20.test.nl/TEST/main.aspx>
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Checking match against auth'n entry: http://tst-crm20.test.nl
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Matched
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> m.devrieze > D=TEST R= M=KERBEROS
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.CacheManager:
> GET(OAH) http://tst-crm20.test.nl/TEST/main.aspx null
> 2015/01/15 17:13:02 DEBUG - 
> jmeter.protocol.http.control.HC4CookieHandler:
> Found 0 cookies for http://tst-crm20.test.nl/TEST/main.aspx
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.CacheManager:
> inCache http://tst-crm20.test.nl/TEST/main.aspx null
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Target URL strings to match against: 
> http://tst-crm20.test.nl/TEST/main.aspx
>  and http://tst-crm20.test.nl:80/TEST/main.aspx
> <http://tst-crm20.test.nl/TEST/main.aspx>
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Checking match against auth'n entry: http://tst-crm20.test.nl
> 2015/01/15 17:13:02 DEBUG - jmeter.protocol.http.control.AuthManager:
> Matched
> 2015/01/15 17:13:02 DEBUG - 
> jmeter.protocol.http.control.KerberosManager:
> Subject cached:[] before:m.devrieze
> 2015/01/15 17:14:32 WARN  - 
> jmeter.protocol.http.control.KerberosManager:
> Could not log in user m.devrieze 
> javax.security.auth.login.LoginException:
> Receive timed out
It seems, that the kerberos server did not answer the request for a 
service ticket (at least not within the default timeout of 30s).
Could you rerun the test with the java system property 
"sun.security.krb5.debug" set to true?

Could you post the contents of your krb5.conf and jaas.conf file?

Regards
  Felix
> 
> *Thanks! *
> 
> *Martijn de Vrieze*
> 
> 
> Skype: martijndevrieze | gtalk: martijndevrieze@qa-rocks.com | Twitter:
> http://www.twitter.com/martijndevrieze |

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@jmeter.apache.org
For additional commands, e-mail: user-help@jmeter.apache.org