https://bz.apache.org/bugzilla/show_bug.cgi?id=64011

--- Comment #3 from Michael Osipov <micha...@apache.org> ---
(In reply to Mike Lothian from comment #2)
> I got the info from here:
> 
> https://tomcat.apache.org/tomcat-8.5-doc/config/realm.html
> 
> spnegoDelegationQop This attribute should be a comma-separated list of
> values selected from auth-conf, auth-int and auth

The Java SASL GSSAPI mech has a bug which makes this possible, otherwise it
should fail: https://bugs.openjdk.java.net/browse/JDK-8160818

> Removing useDelegatedCredential="true" also doesn't work with 8.5.50 but
> does with 8.5.49
> 
> Which debug options should be switched on?

You need to enable FINEST for org.apache.catalina.realm and
org.apache.catalina.authenticator.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to