Special char

Hello,

I'm trying to authenticate a user against Active Directory with Java. It works well but when i'm trying to use special characters (like ? ? ? in the password, the kerberos logon fails. Do i have to encode my string in another format ? Does kerberos support these char ?

The code:

public static void main(String [] args) throws Exception {

System.setProperty("sun.security.krb5.debug", "true");

System.setProperty("java.security.krb5.realm", "TEST.KERBEROS");

System.setProperty("java.security.krb5.kdc", "kerberos.test.kerberos");

System.setProperty("java.security.auth.login.config","D:\\Outils\\eclipse\\workspace\\Kerberos\\kerberos\\jaas.conf");

LoginContext lc = new LoginContext("kerberos", new TextCallbackHandler());

try{

lc.login();

}

Thanks,

R閙i.

[852 byte] By [calimoxoa] at [2007-10-3 2:50:12]
# 1
Non-ASCII username/password are not supported under the present definition. Kerberos V is not internationalized. Applications are expected to provide ASCII characters with Kerberos, which is in compliance with the specification.Seema
Seema-1a at 2007-7-14 20:39:01 > top of Java-index,Security,Kerberos & Java GSS (JGSS)...
# 2

Hi,

I am trying to authenticate a user with non ascii character in the user name, using SPNEGO. The character's Unicode value is FE (UTF-8 representation is C3 BE) .

The kerbros authenticaiton seems to be successful but extracing the GSS name from the GSS token object doesn't return the original user name. Instead of the byte sequence C3 BE, the byte sequence EF BF BD EF BF BD is returned.

This looks to be the same problem as mentioned here. Can you please point me to the appropriate defect id / any link where the defect is listed?

s_jayaram_sa at 2007-7-14 20:39:01 > top of Java-index,Security,Kerberos & Java GSS (JGSS)...
# 3

Kerberos V is not internationalized. Applications are expected to provide

ASCII characters with Kerberos, which is in compliance with the specification.

Non-ASCII username/passwords are not supported under the present definition.

There is an ongoing effort at IETF to address this. This is no defect id on this.

The Kerberos specification does not define it as yet.

Seema

Seema-1a at 2007-7-14 20:39:01 > top of Java-index,Security,Kerberos & Java GSS (JGSS)...