kerberos problem

[Peter Schober]

* xingcy <xingcy at ihep.ac.cn> [2012-05-09 02:44]:
>   I have finished the connectiong idp2.3.3 and ldap on linux and
>   everything is working just fine with ldap authentication using
>   sp,now I want to trying to setup kerberos authentication.
[...]
>    09:13:46.538 - ERROR [edu.internet2.middleware.shibboleth.common.config.BaseSer
> vice:188] - Configuration was not loaded for shibboleth.AttributeResolver servi
> ce, error creating components.  The root cause of this error was: org.xml.sax.S
> AXParseException: cvc-identity-constraint.4.3: Key 'DataConnectorAttributeDefin
> itionDependencyRef' with value 'HTTP' not found for identity constraint of elem
> ent 'AttributeResolver'.

That (the error in your resolver configuration) has nothing to do with
authentication. It just tells you you defined a dependecy on an
attribute definition (or data connecttor) which doesn't exists (from
my underderstanding).
> 
>     <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"
>         ldapURL="ldap://ldap.ihep.ac.cn"
[...]
>         <resolver:Dependency ref="HTTP" />
>         <resolver:Dependency ref="ihep.ac.cn" />

Do you have an attribute definition (or data connector) with an id of
"HTTP" in your resolver config? Why do you think you need to add this?
-peter