[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 Mark Thomas changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #8 from Mark Thomas --- This has now been fixed in 7.0.x for 7.0.57 onwards. -- You are receiving this mail because: You are the assignee for the bug. - To u

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #7 from Detelin Yordanov --- Thanks Mark, The patch I tested with that proved to work was similar, I have not done any tests with IBM JDK though. Should the following note in "Windows Auth How-to" be removed then: "The syste

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #6 from Mark Thomas --- I've done a little svn archeology. Originally, the SPNEGO authenticate did call Realm.authenticate using Subject.doAs(). That was removed as it wasn't necessary early in the SPNEGO development. I have j

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-30 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #5 from Mark Thomas --- A short update. I can reproduce this with Tomcat 8 and both the latest Java 7 and Java 8 releases. I have a patch that fixes this but it currently depends on an internal Sun API. I am looking at ways to

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-29 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #4 from Detelin Yordanov --- I managed to overcome this error by setting -Djavax.security.auth.useSubjectCredsOnly=false Still, I would like to know if there is a reason not to use Subject.doAs when doing GSSAPI authentication a

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 Detelin Yordanov changed: What|Removed |Added OS||All -- You are receiving this

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #3 from Detelin Yordanov --- Created attachment 32062 --> https://issues.apache.org/bugzilla/attachment.cgi?id=32062&action=edit Error log -- You are receiving this mail because: You are the assignee for the bug. --

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #2 from Detelin Yordanov --- Created attachment 32061 --> https://issues.apache.org/bugzilla/attachment.cgi?id=32061&action=edit Tomcat configuration -- You are receiving this mail because: You are the assignee for the bug.

[Bug 57022] Tomcat Spnego authentication against Active Directory fails with Java 8

2014-09-26 Thread bugzilla
https://issues.apache.org/bugzilla/show_bug.cgi?id=57022 --- Comment #1 from Detelin Yordanov --- Created attachment 32060 --> https://issues.apache.org/bugzilla/attachment.cgi?id=32060&action=edit Tomcat Kerberos configuration -- You are receiving this mail because: You are the assignee for