Kerberos on linux/java

Connectivity
Highlighted
Enthusiast

Kerberos on linux/java

Hello,

 

On a linux system I'm trying to implement the SSO via Kerberos to connect to a Teradata database.

 

To test it and to configure it I'm using a simple java test program that try to open a connection and then exit.

 

So the java command line include :

-Djava.security.auth.login.config=$HOME/teraJDBC.config
-Djavax.security.auth.useSubjectCredsOnly=false
-Djava.security.krb5.conf=/etc/krb5.conf TDA_JBDC_Info

 

and the connection string is "jdbc:teradata://<hostname>/LOGMECH=KRB5,TMODE=ANSI,CHARSET=UTF8"

 

When I try I get the following error :

 

*** SQLException caught ***
Error code: 1014
SQL State: HY000
Message: [Teradata JDBC Driver] [TeraJDBC 15.10.00.05] [Error 1014] [SQLState HY000] TeraEncrypt: Error tdgss-stack-trace-begin>>> javax.security.auth.login.LoginException: Client not found in Kerberos database (6)
at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:696)
at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:542)

 

A collegue that have kerberos competence told me that is well configured

On windows everytingh works fine, the same java program estabilsh the connection via SSO.

Why on linux I get the error?!

 

The JDBC Driver version is 15.10.00.05 

with Java 1.5

 

thank you, ciao

GIovanni

1 REPLY
Teradata Employee

Re: Kerberos on linux/java

GIovanni,

Are you able to run the "kinit -Vf" command on your linux machine successfully ?
Please provide the output from that command.

 

What is your KDC running on - Windows or Linux ?

 

Could you add this to your command line flags and send the results:
-Dsun.security.krb5.debug=true

 

Dave