When deploying the code to the test environment, the application fails with the following error. I am not too sure what else need to be changed from the configuration to make it works.
The code works fine on the development environment.
2014-01-09 09:41:08 DEBUG [CommonsSsoLogger - debug] - Session ID: b6a4c82bc71daace11bd88205a4a86ccc2fed8098f462d51039ba3ac3423d331
Request: /rootpj/login-action.vsj
Remote: 101.203.67.93
Principal: rootpjqsjsvc@DM.FAIRPLAYNET.COM
Message: Method = GET, doAuthentication = true, isUnsolicited = false
2014-01-09 09:41:08 DEBUG [CommonsSsoLogger - debug] - Session ID: b6a4c82bc71daace11bd88205a4a86ccc2fed8098f462d51039ba3ac3423d331
Request: /rootpj/login-action.vsj
Remote: 101.203.67.93
Principal: rootpjqsjsvc@DM.FAIRPLAYNET.COM
Message: Attempting to negotiate using SPNEGO
2014-01-09 09:41:08 DEBUG [CommonsLogWrapper - debug] - GSS: Acceptor supports: KRB5
2014-01-09 09:41:08 DEBUG [CommonsLogWrapper - debug] - Ticket service name is: HTTP/ms03012.mss.fairplaynet.com@DMTEST.FAIRPLAYNET.COM
2014-01-09 09:41:08 DEBUG [CommonsLogWrapper - debug] - GSS name is: rootpjqsjsvc@DM.FAIRPLAYNET.COM
2014-01-09 09:41:08 DEBUG [CommonsLogWrapper - debug] - Using keytab entry for: rootpjqsjsvc@DM.FAIRPLAYNET.COM
2014-01-09 09:41:08 DEBUG [CommonsLogWrapper - debug] - ** decrypting ticket .. **
with key
Principal: rootpjqsjsvc@DM.FAIRPLAYNET.COM
Type: 1
TimeStamp: Thu Jan 09 09:40:55 EST 2014
KVNO: -1
Key: [23, af 97 1a 61 10 f9 44 f8 10 7e eb cc 92 6f fd 99 ]
2014-01-09 09:41:08 DEBUG [CommonsLogWrapper - debug] - Could not decrypt service ticket with Key type 23, KVNO 5, Principal "HTTP
/ms03012.mss.fairplaynet.com@DMTEST.FAIRPLAYNET.COM" using key:
Principal: [1] rootpjqsjsvc@DM.FAIRPLAYNET.COM
TimeStamp: Thu Jan 09 09:40:55 EST 2014
KVNO: -1
EncType: 23
Key: 16 bytes, fingerprint = [c2 e6 1 d 13 13 1a ec 3e 83 3c 41 63 c7 9f f8]
Exception for this key was: com.dstc.security.kerberos.CryptoException: Integrity check failure[Note: principal names are different
; this may or may not be a problem]
[Note: KVNO used wildcard match, not exact match; perhaps the password used to generate this key is not the most recent password?]
com.dstc.security.kerberos.CryptoException: Integrity check failure
at com.dstc.security.kerberos.RC4KerberosCipher.decrypt(RC4KerberosCipher.java:107)
at com.dstc.security.kerberos.TicketImpl.decrypt(TicketImpl.java:113)
at com.dstc.security.kerberos.Kerberos.decryptTicket(Kerberos.java:1566)
at com.dstc.security.kerberos.gssapi.ServerHandShaker.decryptU2STicket(ServerHandShaker.java:462)
at com.dstc.security.kerberos.gssapi.ServerHandShaker.authenticateClient(ServerHandShaker.java:241)
at com.dstc.security.kerberos.gssapi.ServerHandShaker.handle(ServerHandShaker.java:186)
at com.dstc.security.kerberos.gssapi.GSSContext.acceptSecContext(GSSContext.java:349)
at com.dstc.security.kerberos.gssapi.GSSContext.acceptSecContext(GSSContext.java:323)
at com.wedgetail.idm.spnego.server.SpnegoServer.handle(SpnegoServer.java:158)
at com.wedgetail.idm.sso.AbstractAuthenticator.processSpnego(AbstractAuthenticator.java:1794)
at com.wedgetail.idm.sso.MechChecker.authenticate(MechChecker.java:231)
at com.wedgetail.idm.sso.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:1444)
at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthenticationOnly(AbstractAuthenticator.java:1330)
at com.wedgetail.idm.sso.AbstractAuthenticator.checkAuthentication(AbstractAuthenticator.java:1139)
at com.fairplaynet.rootpj.questAuth.SsoAndFormsAuthFilter.processLoginAction(SsoAndFormsAuthFilter.java:102)
at com.fairplaynet.rootpj.questAuth.FormsAuthFilter.filter(FormsAuthFilter.java:337)
at com.fairplaynet.rootpj.questAuth.FormsAuthFilter.doFilter(FormsAuthFilter.java:309)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:644)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:391)
at com.evermind.server.http.HttpRequestHandler.handleNotFound(HttpRequestHandler.java:1087)
at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:948)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:458)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
at java.lang.Thread.run(Thread.java:595)
2014-01-09 09:41:08 ERROR [CommonsSsoLogger - error] - Provider protocol error: com.wedgetail.idm.spnego.server.SpnegoException: GSSException
: Failure unspecified at GSS-API level (Mechanism level: com.dstc.security.kerberos.KerberosException: Could not decrypt service ticket
with Key type 23, KVNO 5, Principal "HTTP/ms03012.mss.fairplaynet.com@DMTEST.FAIRPLAYNET.COM" using key:
Principal: [1] rootpjqsjsvc@DM.FAIRPLAYNET.COM
TimeStamp: Thu Jan 09 09:40:55 EST 2014
KVNO: -1
EncType: 23
Key: 16 bytes, fingerprint = [c2 e6 1 d 13 13 1a ec 3e 83 3c 41 63 c7 9f f8]
Exception for this key was: com.dstc.security.kerberos.CryptoException: Integrity check failure[Note: principal names are different
; this may or may not be a problem]
[Note: KVNO used wildcard match, not exact match; perhaps the password used to generate this key is not the most recent password?]
)
2014-01-09 09:41:08 ERROR [CommonsSsoLogger - error] - Session ID: b6a4c82bc71daace11bd88205a4a86ccc2fed8098f462d51039ba3ac3423d331
Request: /rootpj/login-action.vsj
Remote: 101.203.67.93
Principal: rootpjqsjsvc@DM.FAIRPLAYNET.COM
Message: Could not authorize request: com.wedgetail.idm.sso.ProtocolException: com.wedgetail.idm.spnego.server.SpnegoException
: GSSException: Failure unspecified at GSS-API level (Mechanism level: com.dstc.security.kerberos.KerberosException: Could not decrypt
service ticket with Key type 23, KVNO 5, Principal "HTTP/ms03012.mss.fairplaynet.com@DMTEST.FAIRPLAYNET.COM" using key:
Principal: [1] rootpjqsjsvc@DM.FAIRPLAYNET.COM
TimeStamp: Thu Jan 09 09:40:55 EST 2014
KVNO: -1
EncType: 23
Key: 16 bytes, fingerprint = [c2 e6 1 d 13 13 1a ec 3e 83 3c 41 63 c7 9f f8]
Exception for this key was: com.dstc.security.kerberos.CryptoException: Integrity check failure[Note: principal names are different
; this may or may not be a problem]
[Note: KVNO used wildcard match, not exact match; perhaps the password used to generate this key is not the most recent password?]
)