[jcifs] Re: help me

[Eric Glass]

> Hi!
> 
> I am sorry that I write to your email directly but I have problem
> with jcifs-ext-0.9.4 and I don't have any idea what is wrong.
> 
> When I have configured jcifs-ext I have been doing excactly the
> same as you write in:
> http://lists.samba.org/archive/jcifs/2004-June/003497.html
> 
> And it looks quit OK but I have one problem with "Authentication
> time of ticket cannot be null".
> 
> Please help me if you may... I figth with it 3 days...
> 

I've not encountered this myself, but this issue has been described here:

http://archives.java.sun.com/cgi-bin/wa?A2=ind0210&L=java-security&P=R655&I=-3

They indicate that this is seen when the principal under which the
servlet is executing is marked as delegatable.


Eric



> My Enviroment:
> - AD Windows Server 2003
> - j2sdk 1.4.2
> - Tomcat 5
> - IE 6.0
> - Windows XP Professional (client).
> 
> My debug message:
> >>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
> >>> KrbAsReq calling createMessage
> >>> KrbAsReq in createMessage
> >>> KrbAsReq etypes are: 3 1
> >>> KrbKdcReq send: kdc=w2003.altar.com.pl UDP:88, timeout=30000,
> number of retr
> ies =3, #bytes=238
> >>> KDCCommunication: kdc=w2003.altar.com.pl UDP:88,
> timeout=30000,Attempt =1, #
> bytes=238
> >>> KrbKdcReq send: #bytes read=1307
> >>> KrbKdcReq send: #bytes read=1307
> >>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
> >>> KrbAsRep cons in KrbAsReq.getReply HTTP/frodo.altar.com.pl
> Found key for HTTP/frodo.altar.com.pl at ALTAR.LOCAL
> Entered Krb5Context.acceptSecContext with state=STATE_NEW
> >>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
> >>> EType: sun.security.krb5.internal.crypto.DesCbcMd5EType
> >>> Config reset default kdc ALTAR.LOCAL
> replay cache for lukaszp at ALTAR.LOCAL is null.
> object 0: 1095150232254/254688
> object 0: 1095150232254/254688
> >>> KrbApReq: authenticate succeed.
> >>> EType: sun.security.krb5.internal.crypto.NullEType
> >>>Delegated Creds have pname=lukaszp at ALTAR.LOCAL
> sname=krbtgt/ALTAR.LOCAL at ALTAR
> .LOCAL authtime=null starttime=20040914092352Z
> endtime=20040914160242ZrenewTill=20040921060242Z
> jcifs.spnego.AuthenticationException: Error performing Kerberos
> authentication:
> (......)
> Caused by: java.lang.IllegalArgumentException: Authentication time
> of ticket cannot be null
> 
>