Openfire+spark SSO problem

So using my guide, you got it working?

Доброе утро! Скиньте инструкцию пожалуйста, буду безмерно благодарен. Чувствую что осталось где-то совсем чуть-чуть, но реально не вижу где протупил…

yes, I have

org.jivesoftware.openfire.auth.DefaultAuthorizationPolicy

in the xml, but Spark not work…

Что пишет спарк в логах ошибок?

03.04.2014 9:56:07 org.jivesoftware.spark.util.log.Log warning

WARNING: Exception in Login:

SASL authentication failed:

– caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Illegal key size)]

at org.jivesoftware.smack.sasl.SASLMechanism.authenticate(SASLMechanism.java:121)

at org.jivesoftware.smack.sasl.SASLGSSAPIMechanism.authenticate(SASLGSSAPIMechanis m.java:86)

at org.jivesoftware.smack.SASLAuthentication.authenticate(SASLAuthentication.java: 319)

at org.jivesoftware.smack.XMPPConnection.login(XMPPConnection.java:203)

at org.jivesoftware.LoginDialog$LoginPanel.login(LoginDialog.java:1014)

at org.jivesoftware.LoginDialog$LoginPanel.access$1200(LoginDialog.java:219)

at org.jivesoftware.LoginDialog$LoginPanel$4.construct(LoginDialog.java:730)

at org.jivesoftware.spark.util.SwingWorker$2.run(SwingWorker.java:141)

at java.lang.Thread.run(Unknown Source)

Nested Exception:

javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Illegal key size)]

at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(Unknown Source)

at org.jivesoftware.smack.sasl.SASLMechanism.authenticate(SASLMechanism.java:117)

at org.jivesoftware.smack.sasl.SASLGSSAPIMechanism.authenticate(SASLGSSAPIMechanis m.java:86)

at org.jivesoftware.smack.SASLAuthentication.authenticate(SASLAuthentication.java: 319)

at org.jivesoftware.smack.XMPPConnection.login(XMPPConnection.java:203)

at org.jivesoftware.LoginDialog$LoginPanel.login(LoginDialog.java:1014)

at org.jivesoftware.LoginDialog$LoginPanel.access$1200(LoginDialog.java:219)

at org.jivesoftware.LoginDialog$LoginPanel$4.construct(LoginDialog.java:730)

at org.jivesoftware.spark.util.SwingWorker$2.run(SwingWorker.java:141)

at java.lang.Thread.run(Unknown Source)

Caused by: GSSException: No valid credentials provided (Mechanism level: Illegal key size)

at sun.security.jgss.krb5.Krb5Context.initSecContext(Unknown Source)

at sun.security.jgss.GSSContextImpl.initSecContext(Unknown Source)

at sun.security.jgss.GSSContextImpl.initSecContext(Unknown Source)

… 10 more

Caused by: KrbException: Illegal key size

at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.encrypt(Unknown Source)

at sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.encrypt(Unknown Source)

at sun.security.krb5.EncryptedData.(Unknown Source)

at sun.security.krb5.KrbApReq.createMessage(Unknown Source)

at sun.security.krb5.KrbApReq.init(Unknown Source)

at sun.security.krb5.KrbApReq.(Unknown Source)

at sun.security.krb5.KrbTgsReq.createRequest(Unknown Source)

at sun.security.krb5.KrbTgsReq.(Unknown Source)

at sun.security.krb5.KrbTgsReq.(Unknown Source)

at sun.security.krb5.internal.CredentialsUtil.serviceCreds(Unknown Source)

at sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(Unknown Source)

at sun.security.krb5.Credentials.acquireServiceCreds(Unknown Source)

… 13 more

Caused by: java.security.InvalidKeyException: Illegal key size

at javax.crypto.Cipher.a(DashoA13*…)

at javax.crypto.Cipher.a(DashoA13*…)

at javax.crypto.Cipher.a(DashoA13*…)

at javax.crypto.Cipher.init(DashoA13*…)

at javax.crypto.Cipher.init(DashoA13*…)

at sun.security.krb5.internal.crypto.dk.AesDkCrypto.getCipher(Unknown Source)

at sun.security.krb5.internal.crypto.dk.DkCrypto.dr(Unknown Source)

at sun.security.krb5.internal.crypto.dk.DkCrypto.dk(Unknown Source)

at sun.security.krb5.internal.crypto.dk.AesDkCrypto.encryptCTS(Unknown Source)

at sun.security.krb5.internal.crypto.dk.AesDkCrypto.encrypt(Unknown Source)

at sun.security.krb5.internal.crypto.Aes256.encrypt(Unknown Source)

… 25 more

Попробуйте заменить java библиотеки в клиенте. Файлы для замены брать отсюда.

http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.ht ml

Yes, but when I add PTR record for SPN like on your screenshot in guide, SSO stops working.

So, now SSO is working but i have the new problem. Openfire no longer let me login to admin console.

к сожалению не помогло

Hi All,

For SSO spark login exception :

SASL authentication failed:

– caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Illegal key size)]

the following is the solution :slight_smile:

Most likely you don’t have the unlimited strength file installed :

You may need to download this file and replace this in the spark jre.

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6