I have set up a Kerberos server and OpenLDAP in RHEL5.5. I also have a RHEL6 machine as a client. I have run my Java program using jaas to query the OpenLDAP server from the linux client.I can query the OpenLDAP server if I copy the client's keytab to the client machine and use the following configruation options:principal=wpingliuseKeyTab=truekeyTab=/home/wpingli/ker/java/wpingli_new.keytab;I also can query the OpenLDAP server if I am prompted to input the user/password. This leads me to believe that my enviroment is ok.However, I'm unable to query the server if I run my Java program after kinit:klist[wpingli@pli java]$ klistTicket cache: FILE:/tmp/krb5cc_500Default principal: wpingli@XX.COMValid starting Expires Service principal10/20/11 16:18:06 10/21/11 16:18:02 krbtgt/XX.COM@XX.COMjaas configurationGssExampleSUN{com.sun.security.auth.module.Krb5LoginModule requiredclient=truedebug=truedoNotPrompt=trueuseTicketCache=trueticketCache=/tmp/krb5cc_500;};Exception:Debug is true storeKey false useTicketCache true useKeyTab false doNotPrompt true ticketCache is /tmp/krb5cc_500 isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is falseAcquire TGT from CachePrincipal is null**null credentials from Ticket Cache[Krb5LoginModule] authentication failedUnable to obtain Princpal Name for authenticationAuthentication attempt failedjavax.security.auth.login.LoginException: Unable to obtain Princpal Name for authentication**How can I fix this?
Java could not get the TGT from cache in Linux client
kerberos