Ошибка аутентификации Kerberos на прокси -сервере при использовании CXF [закрыто] ⇐ JAVA

[Anonymous]

Я использую следующий стек: KARAF 4.2.16, CXF 3.3.10
Я пытаюсь сделать запрос на сервер через прокси (с помощью аутентификации Kerberos)
Я создал следующую конфигурацию JAAS: < /p>
CXFClient {
org.apache.karaf.jaas.modules.krb5.Krb5LoginModule required
useKeyTab=false
debug=true;};
< /code>
Добавленные конфигурации в Java: < /p>
java.security.krb5.conf=path/krb5.conf
java.security.auth.login.config=path/jaas.conf
< /code>
Клиент выглядит так: < /p>




testuser@EXAMPLE.COM
123456
Negotiate
CXFClient















..create soap-envelope





< /code>

Журнал отладки JAAS: < /p>
karaf@root()> Debug is true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
[Krb5LoginModule] user entered username: testuser@EXAMPLE.COM
principal is testuser@EXAMPLE.COM
Commit Succeeded
< /code>
Исключение: < /p>
java.lang.RuntimeException: No valid credentials provided (Mechanism level: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - LOOKING_UP_SERVER))
at org.apache.cxf.transport.http.auth.AbstractSpnegoAuthSupplier.getAuthorization(AbstractSpnegoAuthSupplier.java:83) ~[!/:3.3.10]
at org.apache.cxf.transport.http.auth.SpnegoAuthSupplier.getAuthorization(SpnegoAuthSupplier.java:37) ~[!/:3.3.10]
at org.apache.cxf.transport.http.HTTPConduit.setHeadersByAuthorizationPolicy(HTTPConduit.java:814) ~[!/:3.3.10]
at org.apache.cxf.transport.http.HTTPConduit.prepare(HTTPConduit.java:564) ~[!/:3.3.10]
at org.apache.cxf.interceptor.MessageSenderInterceptor.handleMessage(MessageSenderInterceptor.java:47) ~[!/:3.3.10]
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308) [!/:3.3.10]
at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:530) [!/:3.3.10]
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:434) [!/:3.3.10]
at org.apache.camel.component.cxf.CxfProducer.process(CxfProducer.java:133) [!/:2.25.4]
at org.apache.camel.processor.SendProcessor.process(SendProcessor.java:148) [!/:2.25.4]
at org.apache.camel.processor.RedeliveryErrorHandler.process(RedeliveryErrorHandler.java:548) [!/:2.25.4]
at org.apache.camel.processor.CamelInternalProcessor.process(CamelInternalProcessor.java:201) [!/:2.25.4]
at org.apache.camel.processor.Pipeline.process(Pipeline.java:138) [!/:2.25.4]
at org.apache.camel.processor.Pipeline.process(Pipeline.java:101) [!/:2.25.4]
at org.apache.camel.processor.CamelInternalProcessor.process(CamelInternalProcessor.java:201) [!/:2.25.4]
at org.apache.camel.component.timer.TimerConsumer.sendTimerExchange(TimerConsumer.java:197) [!/:2.25.4]
at org.apache.camel.component.timer.TimerConsumer$1.run(TimerConsumer.java:79) [!/:2.25.4]
at java.util.TimerThread.mainLoop(Timer.java:555) [?:1.8.0_422]
at java.util.TimerThread.run(Timer.java:505) [?:1.8.0_422]
< /code>
на сервере Kerberos я вижу следующие журналы < /p>
Jul 04 12:07:55 krb.example.com krb5kdc[34](info): TGS_REQ (2 etypes {aes256-cts-hmac-sha1-96(18), aes128-cts-hmac-sha1-96(17)}) 172.17.0.1: LOOKING_UP_SERVER: authtime 0, etypes {rep=UNSUPPORTED:(0)} testuser@EXAMPLE.COM for HTTP/my-external-service.com@EXAMPLE.COM, Server not found in Kerberos database
< /code>
Кажется, что он пытается аутентифицировать внешнюю службу (my-external-service.com), а не прокси-сервер />https://cxf.apache.org/docs/client-http ... entication

Подробнее здесь: https://stackoverflow.com/questions/796 ... -using-cxf