[java-identity-provider COMMIT] /trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ValidateUsernamePas...

[noreply at shibboleth.net]

Author: scantor
Date: Thu Apr 30 15:53:43 2015
New Revision: 7489

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7489&view=rev
Log:
Backout IDP-114 code a bit while I research,

Modified:
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ValidateUsernamePasswordAgainstKerberos.java

Modified: trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ValidateUsernamePasswordAgainstKerberos.java
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ValidateUsernamePasswordAgainstKerberos.java?rev=7489&r1=7488&r2=7489&view=diff
==============================================================================
--- trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ValidateUsernamePasswordAgainstKerberos.java	(original)
+++ trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/ValidateUsernamePasswordAgainstKerberos.java	Thu Apr 30 15:53:43 2015
@@ -243,8 +243,10 @@
             throw new KrbException("No service keys found in keytab file, unable to verify KDC");
         }
         
+        // TODO: this no longer works on 8, so we're probably going to have to redo all this
+        // on top of GSS-API to make it viable.
         final KrbApReq request = new KrbApReq(serviceCreds, false, false, false, null);
-        final KrbApReq decrypted = new KrbApReq(request.getMessage(), serviceKeys, null);
+        //final KrbApReq decrypted = new KrbApReq(request.getMessage(), serviceKeys, null);
         
         log.debug("{} Successfully decrypted AP_REQ issued to service principal '{}'", getLogPrefix(),
                 servicePrincipal);