CAS采用Spnego认证方式通过Kerberos与AD域整合的问题

0 0

CAS采用Spnego认证方式通过Kerberos与AD域整合的问题 5

我需要把cas与ad整合，在网上搜集到了一些资料，照着做，却不成功。
我的环境信息如下:
操作系统类型为windows server 2008R2
cas 3.5.1,tomcat 7.0.16,active dictionary 2003

************日志信息如下************

2013-01-04 13:48:11,268 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoNegociateCredentialsAction] - Authorization header not found. Sending WWW-Authenticate header

。。。。。。

2013-01-04 13:48:58,611 DEBUG [org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler] - Setting nextToken in credentials
2013-01-04 13:48:58,611 DEBUG [org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler] - Principal is null, the processing of the SPNEGO Token failed
2013-01-04 13:48:58,611 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - org.jasig.cas.support.spnego.authentication.handler.support.JCIFSSpnegoAuthenticationHandler failed to authenticate unknown

2013-01-04 13:48:58,611 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: unknown
WHAT: supplied credentials: unknown
ACTION: AUTHENTICATION_FAILED
APPLICATION: CAS
WHEN: Fri Jan 04 13:48:58 GMT+08:00 2013
CLIENT IP ADDRESS: 51.170.11.221
SERVER IP ADDRESS: 51.170.11.237
=============================================================

2013-01-04 13:48:58,626 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: unknown
WHAT: error.authentication.credentials.bad
ACTION: TICKET_GRANTING_TICKET_NOT_CREATED
APPLICATION: CAS
WHEN: Fri Jan 04 13:48:58 GMT+08:00 2013
CLIENT IP ADDRESS: 51.170.11.221
SERVER IP ADDRESS: 51.170.11.237
=============================================================

2013-01-04 13:48:58,626 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoCredentialsAction] - Obtained output token: NTLMSSP

请问该怎么办？哪位好心的大哥碰到过？

软件测试