SPNEGO: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)

java jboss spnego
felipericcetto picture felipericcetto · Aug 13, 2012 · Viewed 8.7k times · Source

I am trying to use SPNEGO + JBoss 7 + Windows 2008 R2 + JDK 7, but I am getting this exception:

Unable to authenticate - Failure unspecified at GSS-API level
  (Mechanism level: Checksum failed)

I created the keytab:

ktpass -ptype KRB5_NT_PRINCIPAL -crypto All -princ HTTP/[email protected]
  -mapuser win2008 -pass *** -out krb5.keytab

Any ideas why I get this error and how I can solve it?

Answer

felipericcetto picture felipericcetto · Aug 14, 2012

I could resolve following this url: https://community.jboss.org/wiki/ConfiguringJBossNegotiationInAnAllWindowsDomain

but when I executed the ktpass I included this parameters:

-ptype KRB5_NT_PRINCIPAL -crypto All
ktpass -ptype KRB5_NT_PRINCIPAL -crypto All -princ  HTTP/[email protected] -pass *** -mapuser MYDOMAIN\user_name

and then:

ktab -k krb5.keytab -n 0 -a HTTP/[email protected]

Related questions

Decrypt kerberos ticket using Spnego

I'm using spnego ( http://spnego.sourceforge.net ) for kerberos authentication under JBoss. I need to decrypt kerberos ticket to access the authorization-data which will containt PAC data. The PAC data is needed to decide which roles are to be granted …

Read More
What is the difference between Tomcat, JBoss and Glassfish?

I am starting to look into Enterprise Java and the book I am following mentions that it will use JBoss. Netbeans ships with Glassfish. I have used Tomcat in the past. What are the differences between these three programs?

Read More
How to call a stored procedure from Java and JPA

I am writing a simple web application to call a stored procedure and retrieve some data. Its a very simple application, which interacts with client's database. We pass employee id and company id and the stored procedure will return employee …

Read More