CAS 4.0.4 with SPNEGO

[Brent Sun]

hi, 

I configured CAS with SPNEGO, however it was failed (log below), returned HTTP Status 401, my questions is:

1. Obtained token: NTLMSSP xxxx: is it correct?

2. what is possible reasons for failed authentication? didn't call kerberos, or lacking of bean action, or wrong bean action defined in login-webflow.xml?

thanks.

rgds

brent

2017-05-17 08:37:21,538 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - SPNEGO Authorization header found with 56 bytes

2017-05-17 08:37:21,539 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Obtained token: NTLMSSP xxxxx

2017-05-17 08:37:21,547 DEBUG [org.springframework.transaction.annotation.AnnotationTransactionAttributeSource] - Adding transactional method 'CentralAuthenticationServiceImpl.createTicketGrantingTicket' with attribute: PROPAGATION_REQUIRED,ISOLATION_DEFAULT; ''

2017-05-17 08:37:21,554 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Returning cached instance of singleton bean 'transactionManager'

2017-05-17 08:37:21,554 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Creating new transaction with name [org.jasig.cas.CentralAuthenticationServiceImpl.createTicketGrantingTicket]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT; ''

2017-05-17 08:37:21,555 DEBUG [org.hibernate.internal.SessionImpl] - Opened session at timestamp: 14950246415

2017-05-17 08:37:21,555 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Opened new EntityManager [org.hibernate.ejb.EntityManagerImpl@117395ba] for JPA transaction

2017-05-17 08:37:21,555 DEBUG [org.hibernate.engine.transaction.spi.AbstractTransactionImpl] - begin

2017-05-17 08:37:21,555 DEBUG [org.hibernate.engine.jdbc.internal.LogicalConnectionImpl] - Obtaining JDBC connection

2017-05-17 08:37:21,556 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - initial autocommit status: true

2017-05-17 08:37:21,556 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - disabling autocommit

2017-05-17 08:37:21,556 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Exposing JPA transaction as JDBC transaction [org.springframework.orm.jpa.vendor.HibernateJpaDialect$HibernateConnectionHandle@506ef66f]

2017-05-17 08:37:21,567 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Returning cached instance of singleton bean 'timingAspect'

2017-05-17 08:37:21,573 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] - Returning cached instance of singleton bean 'auditTrailManagementAspect'

2017-05-17 08:37:21,645 DEBUG [org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler] - Setting nextToken in credential

2017-05-17 08:37:21,646 INFO [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - JCIFSSpnegoAuthenticationHandler failed authenticating unknown

2017-05-17 08:37:21,667 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Initiating transaction commit

2017-05-17 08:37:21,667 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Committing JPA transaction on EntityManager [org.hibernate.ejb.EntityManagerImpl@117395ba]

2017-05-17 08:37:21,667 DEBUG [org.hibernate.engine.transaction.spi.AbstractTransactionImpl] - committing

2017-05-17 08:37:21,669 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - committed JDBC Connection

2017-05-17 08:37:21,682 DEBUG [org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction] - re-enabling autocommit

2017-05-17 08:37:21,682 DEBUG [org.springframework.orm.jpa.JpaTransactionManager] - Closing JPA EntityManager [org.hibernate.ejb.EntityManagerImpl@117395ba] after transaction

2017-05-17 08:37:21,682 DEBUG [org.springframework.orm.jpa.EntityManagerFactoryUtils] - Closing JPA EntityManager

2017-05-17 08:37:21,682 DEBUG [org.hibernate.engine.jdbc.internal.LogicalConnectionImpl] - Released JDBC connection

2017-05-17 08:37:21,684 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Obtained output token: NTLMSSP xxxxxx

2017-05-17 08:37:21,684 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Setting HTTP Status to 401