[36986] in Kerberos

home help back first fref pref prev next nref lref last post

RE: KrbException: Do not have keys of types listed in

daemon@ATHENA.MIT.EDU (Ravindhar Konka)
Fri May 15 11:55:37 2015

From: Ravindhar Konka <ravindhar_konka@persistent.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Fri, 15 May 2015 08:43:55 +0000
Message-ID: <9473C01FD28BF046A81107ACE49299CD3D214705@HJ-MBX1.persistent.co.in>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

[libdefaults]

default_realm = DOMAIN.COM

default_keytab_name = FILE:c:\apache-tomcat-7.0.61\conf\test.keytab

default_tkt_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96

default_tgs_enctypes = rc4-hmac,aes256-cts-hmac-sha1-96,aes128-cts-hmac-sha1-96

forwardable=true



[realms]

DOMAIN.COM= {

        kdc = domain-ad.DOMAIN.com:88

                                default_domain = DOMAIN.com

}



[domain_realm]

domain.com=DOMAIN.COM

.domain.com= DOMAIN.COM



[appdefaults]

autologin = true

forward = true

forwardable = true

encrypt = true



C:\Users\Administrator>ktpass /out c:\test.keytab /mapuser ssoadmin@DOMAIN.COM<mailto:ssoadmin@DOMAIN.COM>  /princ HTTP/windows-sso-demo.domain.com@DOMAIN.COM<mailto:HTTP/windows-sso-demo.domain.com@DOMAIN.COM> /pass P@ssw0rd /kvno 0





C:\Users\ssoadmin>kinit -k -t test.keytab

Exception: krb_error 0 Do not have keys of types listed in default_tkt_enctypes available; only have keys of following type:  No error

KrbException: Do not have keys of types listed in default_tkt_enctypes available ; only have keys of following type:

        at sun.security.krb5.internal.crypto.EType.getDefaults(EType.java:280)

        at sun.security.krb5.KrbAsReqBuilder.build(KrbAsReqBuilder.java:261)

        at sun.security.krb5.KrbAsReqBuilder.send(KrbAsReqBuilder.java:315)

        at sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:361)

        at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:219)

        at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:113)



C:\Users\ssoadmin>

Please help me

DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post