Kerberos Authentication

Google Cloud Apigee
1

We are trying to connect to Hbase having Kerberos Authentication enabled but getting the below mentioned error

{“fault”:{“faultstring”:“Failed to execute JavaCallout. java.lang.SecurityException: java.io.IOException: Configuration Error:\n\tInvalid control flag, PRINCIPAL”,“detail”:{“errorcode”:“steps.javacallout.ExecutionError”}}}

What can be the reason of the above mentioned ?

We have used the sample proxy provided in the below post and updated the required files on the server
https://community.apigee.com/questions/61530/retrieve-the-kerberos-token-from-kdc-server.html

Javacallout

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

CredentialDelegation


/opt/apigee/tmp/test1-krb5.conf
/opt/apigee/tmp/login.conf
ServicePrincipalLoginContext
xxxxxx

krb5.apigee.CredentialMediation
java://kerberos-credential-mediation.jar

2

Hard to say, it looks like that exception is coming from sun/security/util/AuthResources.java ,

but without a stacktrace, it’s hard to give any further insight.

I’m not familiar specifically with the Callout defined in kerberos-credential-mediation.jar . Is there a way to emit the stacktrace? if you have the source, you may want to wrap the execute() method in a try..catch and emit the stacktrace to a context variable. Example.