topic Kerberos problems: Default realm not specified in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/kerberos-problems-default-realm-not-specified/m-p/272802#M225932 <HTML><HEAD></HEAD><BODY><SPAN>I'm trying to set up authentication and SSO with AD through Kerberos. I've followed the documentation for 4.0 but can't get it to work.</SPAN><BR /><BR /><SPAN>This is my </SPAN><EM>kerberos-filter.properties</EM><BR /><PRE class="language-none line-numbers"><CODE><BR />kerberos.authentication.http.configEntryName=AlfrescoHTTP<BR />kerberos.authentication.http.password=********<BR />kerberos.authentication.sso.enabled=true<BR />kerberos.authentication.browser.ticketLogons=true<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>I've created this </SPAN><EM>krb5.ini</EM><SPAN> in </SPAN><EM>C:\WINNT</EM><SPAN>:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />[libdefaults]<BR /> default_realm = MYDOMAIN.LOCAL<BR /> default_tkt_enctypes = rc4-hmac<BR /> default_tgs_enctypes = rc4-hmac <BR /><BR />[realms]<BR /> MYDOMAIN.LOCAL = {<BR />&nbsp; kdc = adserver.mydomain.local<BR />&nbsp; admin_server = adserver.mydomain.local<BR /> }<BR /><BR />[domain_realm]<BR /> adserver.mydomain.local = MYDOMAIN.LOCAL<BR /> .adserver.mydomain.local = MYDOMAIN.LOCAL<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>However, when I try to access the Alfresco application I get the following error:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'globalAuthenticationFilter' defined in file [C:\Alfresco\tomcat\webapps\alfresco\WEB-INF\classes\alfresco\subsystems\Authentication\kerberos\kerberos-filter-context.xml]: Invocation of init method failed; nested exception is javax.servlet.ServletException: Failed to login HTTP server service<BR />caused by:<BR />javax.servlet.ServletException: Failed to login HTTP server service<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>This is in stdout.log:</SPAN><BR /><PRE class="language-none line-numbers"><CODE><BR />Caused by: KrbException: Null realm name (601) - default realm not specified <BR />&nbsp;&nbsp;&nbsp;at sun.security.krb5.KrbAsReq.createMessage(KrbAsReq.java:474)<BR />&nbsp;&nbsp;&nbsp;at sun.security.krb5.KrbAsReq.init(KrbAsReq.java:374)<BR />&nbsp;&nbsp;&nbsp;at sun.security.krb5.KrbAsReq.&lt;init&gt;(KrbAsReq.java:260)<BR />&nbsp;&nbsp;&nbsp;at sun.security.krb5.KrbAsReq.&lt;init&gt;(KrbAsReq.java:61)<BR />&nbsp;&nbsp;&nbsp;at sun.security.krb5.Credentials.sendASRequest(Credentials.java:396)<BR />&nbsp;&nbsp;&nbsp;at sun.security.krb5.Credentials.acquireTGT(Credentials.java:355)<BR />&nbsp;&nbsp;&nbsp;at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:662)<BR />&nbsp;&nbsp;&nbsp;… 44 more<BR /><SPAN class="line-numbers-rows"><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>It seems that the krb5.ini settings are not used, since the error says that the default realm is not specified. What could be the cause of this? I've also tried to put the file in </SPAN><EM>&lt;alfresco&gt;/java/jre/lib/security</EM><SPAN>, but that doesn't make any difference.</SPAN><BR /><BR /><SPAN>I also have another question on the subject: The 4.0 documentation states that one should change the settings in </SPAN><EM>share-config-custom.xml.sample</EM><SPAN> to get SSO working with Share and Kerberos, however my share-config-custom.xml.sample does not contain any lines about Kerberos. Am I looking in the wrong place (&lt;alfresco&gt;/tomcat/shared/classes/alfresco/web-extensions).</SPAN></BODY></HTML> Tue, 27 Dec 2011 14:02:06 GMT gronfelt 2011-12-27T14:02:06Z Kerberos problems: Default realm not specified https://connect.hyland.com/t5/alfresco-archive/kerberos-problems-default-realm-not-specified/m-p/272802#M225932 I'm trying to set up authentication and SSO with AD through Kerberos. I've followed the documentation for 4.0 but can't get it to work.This is my kerberos-filter.propertieskerberos.authentication.http.configEntryName=AlfrescoHTTPkerberos.authentication.http.password=********kerberos.authentication.s Tue, 27 Dec 2011 14:02:06 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-problems-default-realm-not-specified/m-p/272802#M225932 gronfelt 2011-12-27T14:02:06Z Re: Kerberos problems: Default realm not specified https://connect.hyland.com/t5/alfresco-archive/kerberos-problems-default-realm-not-specified/m-p/272803#M225933 <HTML><HEAD></HEAD><BODY><SPAN>I gave up on getting this to work in Windows, and instead installed the Linux version of Alfresco on CentOS. This also meant going from 4.0b to 4.0c and now everything works as expected.</SPAN></BODY></HTML> Mon, 02 Jan 2012 07:53:34 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-problems-default-realm-not-specified/m-p/272803#M225933 gronfelt 2012-01-02T07:53:34Z Re: Kerberos problems: Default realm not specified https://connect.hyland.com/t5/alfresco-archive/kerberos-problems-default-realm-not-specified/m-p/272804#M225934 <HTML><HEAD></HEAD><BODY><SPAN>Hi gronfelt ,</SPAN><BR /><SPAN>I am also getting same error.</SPAN><BR /><SPAN>can you please tell why you shift to linux ?</SPAN><BR /><BR /><SPAN>can you suggest me how to solve this in windows?</SPAN><BR /><BR /><BR /></BODY></HTML> Fri, 06 Feb 2015 12:27:10 GMT https://connect.hyland.com/t5/alfresco-archive/kerberos-problems-default-realm-not-specified/m-p/272804#M225934 aditya_chaudhar 2015-02-06T12:27:10Z