javakrb5。tomcat忽略了conf文件
我正在尝试使用tomcat设置kerberos/spnego身份验证。我添加了一个krb5。tomcat目录下的conf文件和SpnegoFilterConfig中的值为read和java。安全krb5。设置了conf,但似乎没有考虑它。无论文件是否存在,我都会得到相同的结果
javax.servlet.ServletException: GSSException: Failure unspecified at GSS-API level (Mechanism level: Encryption type AES256 CTS mode with HMAC SHA1-96 is not supported/enabled)
如果我把jce安全文件放在lib/security中,我会得到
javax.servlet.ServletException: GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP REP - AES256 CTS mode with HMAC SHA1-96)
然而,无论我是否拥有krb5,这种情况都会发生。确认与否
# 1 楼答案
您是否已将您的安全策略文件替换为Java的无限强度权限策略文件
http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html