[jcifs] Re: Kerberos Problem

[Michael B Allen]

On Tue, 20 Mar 2007 08:09:36 +0000 (UTC)
Jan Gärtner <gaert at gg-see.de> wrote:

> First of all, thank you very much for your support!
> 
> Now the next exception in the Kerb5Authenticator class
> at line 190 is thrown:
> 
> token = spnego.initSecContext(token, 0, token.length);
> 
> with the Exception
> 
> com.ibm.security.krb5.Asn1Exception, Statuscode: 906
> 	Nachricht: Unerwartete ASN1-ID
> 	at com.ibm.security.krb5.internal.KDCRep.a(KDCRep.java:53)
> 	at com.ibm.security.krb5.internal.TGSRep.a(TGSRep.java:1)
> 	at com.ibm.security.krb5.internal.TGSRep.<init>(TGSRep.java:2)
> 	at com.ibm.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:19)
> 	at com.ibm.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:24)
> 	at com.ibm.security.krb5.internal.l.b(l.java:14)
> 	at com.ibm.security.krb5.internal.l.a(l.java:57)
> 	[...]
> 
> 
> [KRB_DBG_KDC] KRBError:main: >>>KRBError:
> [KRB_DBG_KDC] KRBError:main:sTime is Tue Mar 20 09:00:19 CET 2007 1174377619000
> [KRB_DBG_KDC] KRBError:main:suSec is 633379
> [KRB_DBG_KDC] KRBError:main:error code is 7

I'm afraid this is probably a show stopper. The IBM ASN.1 routines are
basically failing to decode the Kerberos reply message. I'm not sure
what else you can do but contact the IBM guys responsible for their
Kerberos packages.

Mike

-- 
Michael B Allen
PHP Active Directory Kerberos SSO
http://www.ioplex.com/