[jcifs] KerberosAuthExample

[Mike Streeton]

Hi,

   I have been trying to get the Kerberos example working with Active
Directory for this the following information is useful:  KDC = Active
Directory server, Realm = Domain name (fully qualified). This get you
passed the login but fails when it tries to access the file: 

 

Debug is  true storeKey false useTicketCache false useKeyTab false
doNotPrompt false ticketCache is null KeyTab is null refreshKrb5Config
is false principal is null tryFirstPass is true useFirstPass is false
storePass is true clearPass is false

username from shared state is my.user

 

username from shared state is my.user

 

password is mypassword

principal is my.user at ARDENTIA.CO.UK

Acquire TGT using AS Exchange

EncryptionKey: keyType=3 keyBytes (hex dump)=0000: B0 AD C8 E0 AE 9B 38
5B   

EncryptionKey: keyType=1 keyBytes (hex dump)=0000: B0 AD C8 E0 AE 9B 38
5B   

EncryptionKey: keyType=16 keyBytes (hex dump)=0000: 6D DA 7F D3 80 BF 5E
CD   97 64 9E 7F 46 91 FE 70  m.....^..d..F..p

0010: C7 7A BC 64 DA 52 AD AD   

            [Krb5LoginModule] authentication succeeded

Commit Succeeded 

 

jcifs.smb.SmbException: Signature verification failed.

      at jcifs.smb.SmbTransport.checkStatus(SmbTransport.java:565)

      at jcifs.smb.SmbTransport.send(SmbTransport.java:662)

      at jcifs.smb.SmbSession.send(SmbSession.java:252)

      at jcifs.smb.SmbTree.treeConnect(SmbTree.java:147)

      at jcifs.smb.SmbFile.connect(SmbFile.java:794)

      at jcifs.smb.SmbFile.connect0(SmbFile.java:761)

      at jcifs.smb.SmbFile.send(SmbFile.java:658)

      at jcifs.smb.SmbFile.doNetEnum(SmbFile.java:1645)

      at jcifs.smb.SmbFile.listFiles(SmbFile.java:1594)

      at jcifs.smb.SmbFile.listFiles(SmbFile.java:1504)

      at KerberosAuthExample.main(KerberosAuthExample.java:49)

 

I can access using a standard SmbFile with a NtlmPasswordAuthentication
object. The url I am using is smb://myfileserver/

 

Any ideas?

 

Thanks 

 

Mike

 

 

www.ardentia.com the home of NetSearch

 

-------------- next part --------------
HTML attachment scrubbed and removed