cas + spnego+ logs

View: New views

2 Messages — Rating Filter: Alert me

cas + spnego+ logs

by m.garuti :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

I'm trying to integrate cas server with activedirectory using spnego. After configuring all, clients do not authenticate.
Now i have only these logs..but i can't find out where is the problem.
Is possible to see more detailed logs info? If yes, how can do that?
What is the best approach to identificate these kerberos problems?

this is an example of logs:

2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Action 'InitialFlowSetupAction' beginning execution
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor did not generate service.
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.web.support.SamlArgumentExtractor] - Extractor did not generate service.
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Action 'InitialFlowSetupAction' completed execution; result is 'success'
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoNegociateCredentialsAction] - Action 'SpnegoNegociateCredentialsAction' beginning execution
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoNegociateCredentialsAction] - Action 'SpnegoNegociateCredentialsAction' completed execution; result is 'success'
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Action 'SpnegoCredentialsAction' beginning execution
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - SPNEGO Authorization header found with 228 bytes
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Obtained token: NTLMSSP
2008-05-12 18:36:36,656 DEBUG [org.jasig.cas.CentralAuthenticationServiceImpl] - Attempting to create TicketGrantingTicket for Principal is null
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Unable to obtain the output token required.
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Setting HTTP Status to 401
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Action 'SpnegoCredentialsAction' completed execution; result is 'error'
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 'AuthenticationViaFormAction' beginning execution
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Executing setupForm
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Creating new form object with name 'credentials'
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Creating new instance of form object class [class org.jasig.cas.authentication.principal.UsernamePasswordCredentials]
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Putting form object of type [class org.jasig.cas.authentication.principal.UsernamePasswordCredentials] in scope Flow with name 'credentials'
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Creating new form errors for object with name 'credentials'
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - No property editor registrar set, no custom editors to register
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Putting form errors instance in scope Flash
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 'AuthenticationViaFormAction' completed execution; result is 'success'
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 'AuthenticationViaFormAction' beginning execution
2008-05-12 18:36:36,671 DEBUG [org.jasig.cas.web.flow.AuthenticationViaFormAction] - Action 'AuthenticationViaFormAction' completed execution; result is 'success'

thanks
paco

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

Re: cas + spnego+ logs

by Arnaud Lesueur-4 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Mon, May 12, 2008 at 8:14 PM, m.garuti@... <m.garuti@...> wrote:
> Hi,
>
> I'm trying to integrate cas server with activedirectory using spnego. After
> configuring all, clients do not authenticate.
> Now i have only these logs..but i can't find out where is the problem.
> Is possible to see more detailed logs info? If yes, how can do that?
> What is the best approach to identificate these kerberos problems?

You may need to turn on debug log on org.jasig.cas.support.spnego to
get more informations and also in the handler configuration.

Regards,

--
Arnaud Lesueur

LinkedIn: http://www.linkedin.com/in/lesueur
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas