about kerberos

[Peter Schober]

* 邢春燕 <xingcy at ihep.ac.cn> [2012-05-10 06:38]:
> Hi,Peter
>    Thanks for your reply. I'm sorry, I had a new error about it.

Please keep replies to the list.

> ERROR
> [edu.internet2.middleware.shibboleth.common.config.BaseService:188]
> - Configuration was not loaded for shibboleth.HandlerManager
> service, error creating components.  The root cause of this error
> was: org.xml.sax.SAXParseException: Element or attribute do not
> match QName production: QName::=(NCName':')?NCName. 
[...]
>  <!-- Kerberos Idp -->
>   <!--  <ph:LoginHandler xsi:type="krb:KERBEROS" -->
>    <ph:LoginHandler xsi:type="ph:UsernamePassword"
>                   kerberosCfg="/etc/krb5.conf"
>                   customUnauthorized="/usr/local/java-idp-kerberos-login-handler/examples/unauthorized.html"
>     >

Compare this with the documentation on
https://wiki.shibboleth.net/confluence/display/SHIB2/Kerberos+Login+Handler
You have the wrong LoginHandler active (of type "ph:UsernamePassword")
and the intended one (of type "krb:KERBEROS") is only included in an
XML comment,
-peter