AW: about kerberos

[Ristow Rodrigo]

Hallo xingcy,

This is a "xml" parse exception. Did you not forget the "krb" namespace?

<ProfileHandlerGroup xmlns=
    "urn:mace:shibboleth:2.0:idp:profile-handler"
(...)
    xmlns:krb="http://www.switch.ch/aai/idp/kerberos"
    xsi:schemaLocation="
        urn:mace:shibboleth:2.0:idp:profile-handler classpath:/schema/shibboleth-2.0-idp-profile-handler.xsd
(...)
        http://www.switch.ch/aai/idp/kerberos classpath:/schema/kerberos-login-handler.xsd
        ">
(...)

Please check the documentation at:  http://wiki.shibboleth.net/confluence/display/SHIB2/Kerberos+Login+Handler


Von: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] Im Auftrag von xingcy
Gesendet: Freitag, 11. Mai 2012 02:26
An: users at shibboleth.net
Betreff: about kerberos

Hi,Peter
I have changed my configuration in handler.xml file as below

 <!--  Username/password login handler -->
    <ph:LoginHandler xsi:type="ph:UsernamePassword"                  jaasConfigurationLocation="file:///usr/local/idp/conf/login.config<file:///\\usr\local\idp\conf\login.config>">        <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>    </ph:LoginHandler>

 <!-- Kerberos Idp -->
    <ph:LoginHandler xsi:type="krb:KERBEROS"                  kerberosCfg="/etc/krb5.conf"
                  customUnauthorized="/usr/local/java-idp-kerberos-login-handler/examples/unauthorized.html"    >
        <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos</ph:AuthenticationMethod>
         <krb:Realm domain="IHEP.AC.CN">

         <krb:principal>HTTP/aai-logon.ihep.ac.cn at IHEP.AC.CN</krb:principal<mailto:HTTP/aai-logon.ihep.ac.cn at IHEP.AC.CN%3c/krb:principal>>
          <krb:keytab>/etc/http.keytab</krb:keytab>
        </krb:Realm>
    </ph:LoginHandler>
but the the same error in idp-process.
ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.HandlerManager service, error creating components.  The root cause of this error was: org.xml.sax.SAXParseException: Element or attribute do not match QName production: QName::=(NCName':')?NCName.
Please give me a clue on it ,thanks.

Best Regards.
xingcy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120511/f2e9343f/attachment-0001.html