在Java开发过程中,org.ietf.jgss.GSSException是一种与安全性相关的异常,通常出现在涉及GSS-API(Generic Security Services Application 一、分析问题背景 org.ietf.jgss.GSSException异常通常出现在使用GSS-API进行身份验证的场景中。 三、错误代码示例 下面是一个可能导致org.ietf.jgss.GSSException的错误代码示例: public void authenticateWithServer() { try { 五、注意事项 在处理与GSS-API和Kerberos相关的代码时,注意以下几点可以有效避免org.ietf.jgss.GSSException: 正确配置Kerberos:确保krb5.conf等配置文件中的域名 通过以上注意事项和正确的代码实践,您可以有效避免org.ietf.jgss.GSSException,提高身份验证的成功率和代码的稳定性。希望本文能够帮助您理解并解决这一常见的报错问题。
level: Encryption type AES256 CTS mode with HMAC SHA1-96 is not supported/enabled) at sun.security.jgss.krb5 .Krb5Context.acceptSecContext(Krb5Context.java:856) at sun.security.jgss.GSSContextImpl.acceptSecContext (GSSContextImpl.java:342) at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285 <init>(KrbApReq.java:149) at sun.security.jgss.krb5.InitSecContextToken. <init>(InitSecContextToken.java:108) at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java
jdk.dynalink java.se.ee jdk.incubator.httpclient java.security.jgss jdk.scripting.nashorn java.xml.bind* jdk.security.auth java.xml.crypto jdk.security.jgss
java.prefs.jmod ├── java.rmi.jmod ├── java.scripting.jmod ├── java.se.ee.jmod ├── java.se.jmod ├── java.security.jgss.jmod ├── jdk.scripting.nashorn.shell.jmod ├── jdk.sctp.jmod ├── jdk.security.auth.jmod ├── jdk.security.jgss.jmod
Encryption type AES256 CTS mode with HMAC SHA1-96 is not supported/enabled) at sun.security.jgss.krb5 .Krb5Context.acceptSecContext(Krb5Context.java:856) at sun.security.jgss.GSSContextImpl.acceptSecContext (GSSContextImpl.java:342) at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java <init>(KrbApReq.java:149) at sun.security.jgss.krb5.InitSecContextToken. <init>(InitSecContextToken.java:108) at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java
详细参见:JDK-8223053 十八、security-libs/org.ietf.jgss Added a Default Native GSS-API Library on Windows It will be loaded when the sun.security.jgss.native system property is set to "true". user can still load a third-party native GSS-API library by setting the system property sun.security.jgss.lib 详细参见:JDK-6722928 十九、security-libs/org.ietf.jgss:krb5 Support for Kerberos Cross-Realm Referrals (RFC
-p $J/jmods --add-modules java.base,java.sql,java.naming,java.desktop,java.management,java.security.jgss
user/fayson/oozie/testoozie (可左右滑动) [pdqwlp0ch7.jpeg] 4.准备JAAS文件oozie-login.conf,内容如下 com.sun.security.jgss.initiate System.setProperty("javax.security.auth.useSubjectCredsOnly", "false"); System.setProperty("ssun.security.jgss.debug
inputStream.close(); } } } } 创建配置文件http.conf com.sun.security.jgss.krb5
transitive requires java.scripting transitive requires java.logging transitive requires java.security.jgss java.management.rmi@9 java.naming@9 java.prefs@9 java.rmi@9 java.scripting@9 java.se@9 java.se.ee@9 java.security.jgss
support/modules_libs/jdk.security.auth/libjaas.so from 1 file(s) Compiling 16 files for jdk.security.jgss
fayson/oozie/spark2oozie (可左右滑动) [bmldml7s72.jpeg] 4.准备JAAS文件oozie-login.conf,内容如下 com.sun.security.jgss.initiate System.setProperty("javax.security.auth.useSubjectCredsOnly", "false"); System.setProperty("ssun.security.jgss.debug
user/fayson/oozie/testoozie (可左右滑动) [9ujkltbvv2.jpeg] 4.准备JAAS文件oozie-login.conf,内容如下 com.sun.security.jgss.initiate System.setProperty("javax.security.auth.useSubjectCredsOnly", "false"); System.setProperty("ssun.security.jgss.debug
jdk.management.jfr, jdk.naming.ldap, jdk.net, jdk.scripting.nashorn, jdk.sctp, jdk.security.auth, jdk.security.jgss java.management.rmi, java.rmi, java.naming, java.net.http, java.prefs, java.scripting, java.security.jgss
fayson/oozie/shellaction (可左右滑动) [odm3a8wwiv.jpeg] 5.准备JAAS文件oozie-login.conf,内容如下 com.sun.security.jgss.initiate System.setProperty("javax.security.auth.useSubjectCredsOnly", "false"); System.setProperty("ssun.security.jgss.debug
java.desktop,java.instrument,java.management,java.naming,java.prefs,java.rmi,java.scripting,java.security.jgss java.desktop,java.instrument,java.management,java.naming,java.prefs,java.rmi,java.scripting,java.security.jgss
jdk.xml.dom/module-info.class] [正在加载/modules/java.instrument/module-info.class] [正在加载/modules/jdk.security.jgss module-info.class] [正在加载/modules/jdk.internal.jvmstat/module-info.class] [正在加载/modules/java.security.jgss
编写JAAS(Java认证授权服务)配置文件 com.sun.security.jgss.initiate{ com.sun.security.auth.module.Krb5LoginModule
com.sun.net.ssl.internal.ssl.Provider security.provider.4=com.sun.crypto.provider.SunJCE security.provider.5=sun.security.jgss.SunProvider com.sun.net.ssl.internal.ssl.Provider security.provider.5=com.sun.crypto.provider.SunJCE security.provider.6=sun.security.jgss.SunProvider
JavaAuthenticationandAuthorizationService),JCE (JavaCryptographyExtension),JSSE(JavaSecureSocketExtension),以及JGSS