[java-identity-provider COMMIT] /trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/spnego/impl/SPNEGOAuthnC...

[noreply at shibboleth.net]

Author: scantor
Date: Fri Nov  4 15:45:14 2016
New Revision: 8558

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8558&view=rev
Log:
IDP-1079 - Make error message about missing GSSName more verbose

https://issues.shibboleth.net/jira/browse/IDP-1079

Modified:
    trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/spnego/impl/SPNEGOAuthnController.java

Modified: trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/spnego/impl/SPNEGOAuthnController.java
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/spnego/impl/SPNEGOAuthnController.java?rev=8558&r1=8557&r2=8558&view=diff
==============================================================================
--- trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/spnego/impl/SPNEGOAuthnController.java	(original)
+++ trunk/idp-authn-impl/src/main/java/net/shibboleth/idp/authn/spnego/impl/SPNEGOAuthnController.java	Fri Nov  4 15:45:14 2016
@@ -177,7 +177,8 @@
                 final GSSName clientGSSName = acceptor.getContext().getSrcName();
                 if (clientGSSName == null) {
                     // This case should never happen, but we observed it. Handle it as authentication failure.
-                    log.error("Error extracting principal name from security context");
+                    log.error("Error extracting principal name from security context, " +
+                            "check for hostname mismatch or other causes of a missing service ticket");
                     acceptor.logout();
                     finishWithException(conversationKey, httpRequest, httpResponse,
                             new ExternalAuthenticationException(SPNEGO_NOT_AVAILABLE));