about kerberos

[xingcy]

Hi,Peter
I have changed my configuration in handler.xml file as below

 <!--  Username/password login handler -->
    <ph:LoginHandler xsi:type="ph:UsernamePassword"                  jaasConfigurationLocation="file:///usr/local/idp/conf/login.config">        <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>    </ph:LoginHandler>

 <!-- Kerberos Idp -->
    <ph:LoginHandler xsi:type="krb:KERBEROS"                  kerberosCfg="/etc/krb5.conf"
                  customUnauthorized="/usr/local/java-idp-kerberos-login-handler/examples/unauthorized.html"    >
        <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos</ph:AuthenticationMethod>
         <krb:Realm domain="IHEP.AC.CN">

         <krb:principal>HTTP/aai-logon.ihep.ac.cn at IHEP.AC.CN</krb:principal>
          <krb:keytab>/etc/http.keytab</krb:keytab>
        </krb:Realm>
    </ph:LoginHandler>
but the the same error in idp-process.
ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.HandlerManager service, error creating components.  The root cause of this error was: org.xml.sax.SAXParseException: Element or attribute do not match QName production: QName::=(NCName':')?NCName. 
Please give me a clue on it ,thanks.

Best Regards.
xingcy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120511/7378dac8/attachment-0001.html