Login errors in V3 when using Kerberos authentication

[Keith Wessel]

On Sat, Aug 08, 2015 at 04:08:28PM +0000, Cantor, Scott wrote:
> If you're using Java/JAAS to do Kerberos, it should be returning PREAUTH_FAILED, and that's already mapped appropriately. What is the implementation here that's different?

We are using JAAS with all the config items set apropriately from Tom's
message, left as they were in the default distribution.

The error that I included in my original note is the result of an
Kerberos auth against AD. Do I only need to add that specific error
string to the same list in password-authn-config.xml where I already see
PRAUTH_FAILED (the entry with key "InvalidPassword")?

Or should PREAUTH_FAILED already be working with AD Kerberos?

Keith