Quantcast
Channel: Software Communities : Popular Discussions - All Things Unix
Viewing all articles
Browse latest Browse all 1046

org.ietf.jgss.GSSException, Channel binding mismatch

$
0
0
I am getting this Exception when I am trying to do SPNEGO on IE8 over HTTPS. It works fine for CHROME of FIREFOX.

com.wedgetail.idm.sso.ProtocolException: com.wedgetail.idm.spnego.server.SpnegoException: org.ietf.jgss.GSSException, major code: 1, minor code: 0
    major string: Channel binding mismatch
    minor string: None
    at com.wedgetail.idm.sso.AbstractAuthenticator.processSpnego(AbstractAuthenticator.java:1221)
    at com.wedgetail.idm.sso.MechChecker.authenticate(MechChecker.java:205)
    at com.wedgetail.idm.sso.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:1060)
    at com.wedgetail.idm.sso.AbstractAuthenticator.authenticateServiceTicket(AbstractAuthenticator.java:998)
    at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthentication(AbstractAuthenticator.java:953)
    at com.wedgetail.idm.sso.AuthFilter.doFilter(AuthFilter.java:122)

When I set this registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\SuppressExtendedProtection to 0x02 , SPNEGO starts working but the problem is that this key cannot be set for all the machines in the environment. I am using Vintella 3.3. Is there any other workaround to get the SPNEGO going.
Message was edited by: aamir

Message was edited by: aamir

Viewing all articles
Browse latest Browse all 1046

Trending Articles