IndirectKerberosClient Encryption Types

63 views
Skip to first unread message

Jake

unread,
Mar 2, 2023, 3:40:20 AM3/2/23
to Pac4j users mailing list
Hi there,

I'm setting up an IndirectKerberosClient and have followed the syntax on the pac4j kerberos page. I am successfully hitting the kerberos provider and receiving a response token. The issue I'm having is that I get the following error when pac4j tries to authenticate the token. "java.security.PrivilegedActionException: GSSException: Failure unspecified at GSS-API level (Mechanism level: Invalid argument (400) - Cannot find key of appropriate type to decrypt AP-REQ - AES256 CTS mode with HMAC SHA1-96)".

Is there some way to set the expected encryption types with the IndirectKerberosClient like you are able to do with TomEE's Kerberos implementation? 

Thankyou
Reply all
Reply to author
Forward
Message has been deleted
0 new messages