fremak [http://community.jboss.org/people/fremak] created the discussion "Re: Configure AS7 to authenticate users with kerberos" To view the discussion, visit: http://community.jboss.org/message/629305#629305 -------------------------------------------------------------- Thanks for your answer Darran, I started studying how kerberos works so I read this document http://www.kerberos.org/software/tutorial.html http://www.kerberos.org/software/tutorial.html If I understood correctly, in order to have an instance of jboss authenticating with kerberos, we should register the AS as a service handled by KDC. It's the only way kerberos work, right? thanks again fil -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/629305#629305] Start a new discussion in JBoss AS7 Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&...]

Antoan Nikolaev [http://community.jboss.org/people/anikolaev71] created the discussion "Re: Configure AS7 to authenticate users with kerberos" To view the discussion, visit: http://community.jboss.org/message/644709#644709 -------------------------------------------------------------- I think JBOSS will be better if there is a comprehensive documentation on the Kerberos setup. From A-Z.... I've been working on this for couple of days and must tell you it is not a picnic. The hardest part in my case is to get the linux box to get connected to the KDC. I've got that done and now am stuck on the SPNEGO piece. I'll be happy to contribute if anyone helps resolve the issue. Do you have any idea what Mechanis Level: Checksum failed means? 13:14:57,898 ERROR [org.jboss.security.negotiation.spnego.SPNEGOLoginModule] (http-0.0.0.0-0.0.0.0-8082-1) Unable to authenticate: GSSException: F ailure unspecified at GSS-API level (Mechanism level: Checksum failed)         at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:741) [:1.6.0_10]         at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:323) [:1.6.0_10]         at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:267) [:1.6.0_10]         at org.jboss.security.negotiation.spnego.SPNEGOLoginModule$AcceptSecContext.run(SPNEGOLoginModule.java:396) [jboss-negotiation-2.2.0.Beta3 .jar:2.2.0.Beta3]         at java.security.AccessController.doPrivileged(Native Method) [:1.6.0_10]         at javax.security.auth.Subject.doAs(Subject.java:337) [:1.6.0_10]         at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.spnegoLogin(SPNEGOLoginModule.java:237) [jboss-negotiation-2.2.0.Beta3.jar:2.2. 0.Beta3]         at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.innerLogin(SPNEGOLoginModule.java:194) [jboss-negotiation-2.2.0.Beta3.jar:2.2.0 .Beta3]         at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.login(SPNEGOLoginModule.java:137) [jboss-negotiation-2.2.0.Beta3.jar:2.2.0.Beta 3]         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [:1.6.0_10]         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) [:1.6.0_10]         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) [:1.6.0_10]         at java.lang.reflect.Method.invoke(Method.java:597) [:1.6.0_10]         at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769) [:1.6.0_10]         at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186) [:1.6.0_10]         at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683) [:1.6.0_10]         at java.security.AccessController.doPrivileged(Native Method) [:1.6.0_10]         at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680) [:1.6.0_10]         at javax.security.auth.login.LoginContext.login(LoginContext.java:579) [:1.6.0_10]         at org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:411) [picketbox-i nfinispan-4.0.1.jar:4.0.1]  -------------------------------------------------------------- Reply to this message by going to Community [http://community.jboss.org/message/644709#644709] Start a new discussion in JBoss AS 7 Development at Community [http://community.jboss.org/choose-container!input.jspa?contentType=1&...]