Error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid

[rboughani]

I try to do a SSO authentication using WAFFLE, but i have this error

L: waffle.spring.NegotiateSecurityFilter] - [M: error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid

complete error log in image here :
http:https://imgur.com/a/2KWnq

[dblock]

Go through Troubleshooting please, https://github.com/Waffle/waffle/blob/master/Docs/Troubleshooting.md.

[rboughani]

Troubleshooting Kerberos delegation link not work, i have found this link

Troubleshooting Kerberos delegation for Monitoring Server
https://technet.microsoft.com/en-us/library/dd285465(v=office.12).aspx

[rboughani]

And i havn't well understand the situation,
so i can't teste my application in my developer machine ? i muste deploy my application in server to be work correctly ?
can you please more explain me

[hazendaz]

Are you running off current master or 1.8.1? There are some issues on 1.8.1 that might be causing your problem. The latest master is much better at handling issues. You can run on developer machine. In fact, that is the only way I get to use waffle myself as we have linux and as such developer machine is all that will work (ie windows).

[rboughani]

Yes i use the 1.8.1 version,
I have configured just Spring sécurity side, i must configure the Tomcat server too, or i should just to add WAFFLE jar to tomcat lib ??
i'll try tomorow with WAFFLE 1.6 and take you knew with result

[rboughani]

i have the same error with waffle 1.7.5 version,
and with 1.6 i have this problem

 L: waffle.spring.NegotiateSecurityFilter] - [M: error logging in user: The token supplied to the function is invalid] , 

the same error at last except this text

 com.sun.jna.platform.win32.Win32Exception:


 L: io.oasp.module.logging.common.impl.PerformanceLogFilter] - [M: http:https://localhost:8080/suivireco-server/;0;500;java.lang.RuntimeException;Invalid Authorization header: Negotiate]

And i noticed that the port in the fllow line change evry execution

  [L: waffle.servlet.spi.NegotiateSecurityFilterProvider] - [M: security package: Negotiate, connection id: 0:0:0:0:0:0:0:1:64067]

I have try with Troubleshooting, https://github.com/Waffle/waffle/blob/master/Docs/Troubleshooting.md.
but the problem still exist

[dblock]

I think everyone is chasing a red herring wrt version. Kerberos on the local machine should work when you access it by name, I believe you still need an SPN, too. I could be wrong, but I don't believe you can do it with http:https://localhost.

[rboughani]

I think that have link with that

Kerberos (the basis for integrated Windows authentication) requires careful configuration. If the steps in this guide are followed exactly, then a working configuration will result. It is important that the steps below are followed exactly. There is very little scope for flexibility in the configuration. From the testing to date it is known that:

The host name used to access the Tomcat server must match the host name in the SPN exactly else authentication will fail. A checksum error may be reported in the debug logs in this case.

http:https://tomcat.apache.org/tomcat-8.0-doc/windows-auth-howto.html

at my client they use two different domain, one with netbiios SAM, and another with @cc.fr

[rboughani]

When i try to excute this line command, that return me "account http:https://localhost not found"

  setspn -L http:https://localhost

And when i want to create an new spn for my machine that return me that i have not access
Insufficient access right for the account........

  setspn -A HTTP/localhost:8080 rboughani

[dblock]

Localhost is not something that's known to your domain controller. So I think this has to be a fully qualified name of your machine on the domain that it is joined to.

[rboughani]

i have see with the network admins, and they say me that Kerberos system need an SPN and services account, and they will create me one,
i let you knew if they work

[AniWar]

I'm experiencing this as well (Trying with Java+ glassfish4 ), can someone please point out what was the correct solution to this ?