2 Replies Latest reply: Dec 8, 2011 11:31 PM by 801647 RSS

    GSS initiate failed [Caused by GSSException: No valid credentials provided

    801647
      When I try to get Ldap context after authenticating using Kerborose getting the below exception.
      actuallu I sucessfully authenticated by using kerborose,


      javax.naming.AuthenticationException: GSSAPI [Root exception is javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7))]]
           at com.sun.jndi.ldap.sasl.LdapSasl.saslBind(LdapSasl.java:150)
           at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:214)
           at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2637)
           at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:283)
           at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
           at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
           at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
           at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
           at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
           at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:247)
           at javax.naming.InitialContext.init(InitialContext.java:223)
           at javax.naming.InitialContext.<init>(InitialContext.java:197)
           at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:82)
           at JndiAction.performJndiOperation(HelloKDC.java:225)
           at JndiAction.run(HelloKDC.java:202)
           at java.security.AccessController.doPrivileged(Native Method)
           at javax.security.auth.Subject.doAs(Subject.java:337)
           at HelloKDC.performKerboseAndLdapAuthentication(HelloKDC.java:114)
           at HelloKDC.main(HelloKDC.java:51)
      Caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7))]
           at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:174)
           at com.sun.jndi.ldap.sasl.LdapSasl.saslBind(LdapSasl.java:105)
           ... 18 more
      Caused by: GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7))
           at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:654)
           at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:213)
           at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:158)
           at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:155)
           ... 19 more
      Caused by: KrbException: Server not found in Kerberos database (7)
           at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:61)
           at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:234)
           at sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:294)
           at sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:106)
           at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:561)
           at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:585)
           ... 22 more
      Caused by: KrbException: Identifier doesn't match expected value (906)
           at sun.security.krb5.internal.KDCRep.init(KDCRep.java:133)
           at sun.security.krb5.internal.TGSRep.init(TGSRep.java:58)
           at sun.security.krb5.internal.TGSRep.<init>(TGSRep.java:53)
           at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:46)