[39468] in Kerberos
Re: Issue with Kerberos authentication using API / MSLSA ccache type
daemon@ATHENA.MIT.EDU (Ken Hornstein via Kerberos)
Sat Nov 23 13:53:20 2024
Message-Id: <202411231851.4ANIpgVo016830@hedwig.cmf.nrl.navy.mil>
To: Samir Sayyed <ssayyed@us.ibm.com>
cc: "kerberos@mit.edu" <kerberos@mit.edu>,
Prachi Raikar <Prachi.Raikar2@ibm.com>,
Sneha Lodha <Sneha.Lodha3@ibm.com>,
Aayush Kumar <Aayush.Kumar3@ibm.com>
In-Reply-To: <CH3PR15MB5514C4E544AC86EFB6D015029B222@CH3PR15MB5514.namprd15.prod.outlook.com>
MIME-Version: 1.0
Date: Sat, 23 Nov 2024 13:51:42 -0500
From: Ken Hornstein via Kerberos <kerberos@mit.edu>
Reply-To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>We are using 1.20 Kerberos library on our Windows platform for
>authenticating with our Netezza server.
Are you sure you are using MIT Kerberos? Because based on the messages
below it sure seems like you actually using the Java Kerberos library
and I was under the impression that was it's own thing. Also, the
debug messages you show are not ones typically generated by MIT Kerberos.
E.g.:
Java config name: C:\ProgramData\MIT\Kerberos5\krb5.ini
Loading krb5 profile at C:\ProgramData\MIT\Kerberos5\krb5.ini
Loaded from Java config
>>> KdcAccessibility: reset
>>> KdcAccessibility: reset
Acquire TGT from Cache
Principal is MYUSER@NZSQA.IBM.COM
null credentials from Ticket Cache
Nothing I can find in MIT Kerberos generates these messages. MIT
Kerberos debug messages (which are generated by setting the KRB5_TRACE
environment variable) look like this:
[1613] 1732387726.184428: Response was from primary KDC
[1613] 1732387726.184429: Processing preauth types: PA-ETYPE-INFO2 (19)
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
