-
Bug
-
Resolution: Fixed
-
P4
-
1.4.0, 1.4.1_03
-
beta
-
generic, x86
-
solaris_8, windows_2000
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-2135127 | 5.0u8 | Weijun Wang | P4 | Resolved | Fixed | b01 |
| JDK-2136027 | 1.4.2_14 | Kevin Walls | P4 | Resolved | Fixed | b02 |
JDK on Windows 2003 passes value to Kerberos and does not wait for Kerberos to return a "salt" value. As a result, the following error is generated:
KrbException: Pre-authentication information was invalid (24)
at sun.security.krb5.KrbAsRep.<init>(DashoA6275:62)
at sun.security.krb5.KrbAsReq.getReply(DashoA6275:308)
at sun.security.krb5.KrbAsReq.getReply(DashoA6275:271)
at sun.security.krb5.internal.tools.Kinit.<init>(DashoA6275:264)
at sun.security.krb5.internal.tools.Kinit.main(DashoA6275:104)
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.af.a(DashoA6275:129)
at sun.security.krb5.internal.au.a(DashoA6275:58)
at sun.security.krb5.internal.au.<init>(DashoA6275:53)
at sun.security.krb5.KrbAsRep.<init>(DashoA6275:48)
... 4 more
This is because Windows is a case insensitive platform. This does not happen on Solaris. There are two defects "around" this issue, which basically have been "documented out" in J2SE 1.5x (4946917, 4963731). The customer sees this with the kinit example and with their own code.
###@###.### 2005-2-11 23:07:53 GMT
KrbException: Pre-authentication information was invalid (24)
at sun.security.krb5.KrbAsRep.<init>(DashoA6275:62)
at sun.security.krb5.KrbAsReq.getReply(DashoA6275:308)
at sun.security.krb5.KrbAsReq.getReply(DashoA6275:271)
at sun.security.krb5.internal.tools.Kinit.<init>(DashoA6275:264)
at sun.security.krb5.internal.tools.Kinit.main(DashoA6275:104)
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.af.a(DashoA6275:129)
at sun.security.krb5.internal.au.a(DashoA6275:58)
at sun.security.krb5.internal.au.<init>(DashoA6275:53)
at sun.security.krb5.KrbAsRep.<init>(DashoA6275:48)
... 4 more
This is because Windows is a case insensitive platform. This does not happen on Solaris. There are two defects "around" this issue, which basically have been "documented out" in J2SE 1.5x (4946917, 4963731). The customer sees this with the kinit example and with their own code.
###@###.### 2005-2-11 23:07:53 GMT
- backported by
-
JDK-2135127 JDK on Windows does not wait for preauthorizaion record from Kerberos and causes an error
-
- Resolved
-
-
-
- Resolved
-
- duplicates
-
JDK-4460767 GSS-Krb5 mechananism should support KRB-ERROR token encapsulation
-
- Closed
-
- relates to
-
-
- Resolved
-