[Freeipa-devel] Talking json/rpc with java client

[Alexander Bokovoy]

On Mon, 24 Mar 2014, Massimiliano Perrone (tirasa.net) wrote:
>>>As you can see in the row indicated by the arrow there's:
>>>Entered Krb5Context.initSecContext with state=STATE_NEW
>>>Service ticket not found in the subject 
>>><---------------------------------------------------------------
>>>Is this right?
>>
>>Hi guys, sorry for the noise...
>>Maybe this informations can help us to understand the root cause of 
>>our problem.
>>
>>httpd access_log
>>192.168.0.176 - HTTP/ebano.tirasa.net at TIRASA.NET 
>>[24/Mar/2014:12:21:57 +0100] "POST /ipa/json HTTP/1.1" 500 272
>>httpd error_log
>>[Mon Mar 24 12:21:57.971182 2014] [:error] [pid 24462] ipa: ERROR: 
>>500 Internal Server Error: jsonserver_kerb.__call__: KRB5CCNAME not 
>>defined in HTTP request environment
>
>Other question/information...
>I don't know if I'm saying something wrong but......
>Reading [1] at line 980 I noticed that kinit method sets KRB5CCNAME variable
>
[skip]

>
>Is possible that LoginContext method of Java Kerberos libraries 
>doesn't do the same thing?
I don't think so. What the code above is not related. KRB5CCNAME is set
by the mod_auth_kerb before handing over request processing to WSGI
module.


-- 
/ Alexander Bokovoy