RenewTGT using native cache with KRB5 Message stream modified

Question

I have implemented the Jass tutorial JassAcn.java and it works fine when username and password are entered.
However,when I try to use the ticket from the native cache I get the following error :
     Ticket could not be renewed : Message stream modified (41)     
and then get prompted to enter the username followed by the password. If I enter the user name
and password the authentication is successfull.
I am using a Windows XP SP2 client and JDK 1.5 and a Win2000 server.
The registry key "allowtgtsessionkey" on the client has been set to 0x01 as recommended by
C:\jdk15help\docs\guide\security\jgss\tutorials\Troubleshooting.html
The "Message stream modified" error seems to imply that
checksum used to verify the data packet didn't match what was expected or some packets are being corrupted.
I tried different default_checksum but to no avail.
Has anyone encountered this before?
My config file is as follows:
JaasSample {
com.sun.security.auth.module.Krb5LoginModule required
                    useTicketCache=true
                    renewTGT = true
                    debug=true;
and the debug log
Debug is true storeKey false useTicketCache true useKeyTab false doNotPrompt false ticketCache is null KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
Acquire TGT from Cache
Ticket could not be renewed : Message stream modified (41)
Principal is null
null credentials from Ticket Cache
Kerberos username [myname]:
Kerberos password for myname: mypassword
          [Krb5LoginModule] user entered username: myname
principal is [email protected]
Acquire TGT using AS Exchange
EncryptionKey: keyType=3 keyBytes (hex dump)=0000: 38 1A 02 C8 EA 5B EA 67
EncryptionKey: keyType=1 keyBytes (hex dump)=0000: 38 1A 02 C8 EA 5B EA 67
EncryptionKey: keyType=16 keyBytes (hex dump)=0000: D5 F1 D5 DF AD 67 37 5D 3B AB A2 AE 89 1F 13 F1 .....g7];.......
0010: FB EA AB AB D3 52 40 D6
Commit Succeeded

Answer 1

I have implemented the Jass tutorial JassAcn.java and it works fine when username and password are entered.
However,when I try to use the ticket from the native cache I get the following error :
     Ticket could not be renewed : Message stream modified (41)     
and then get prompted to enter the username followed by the password. If I enter the user name
and password the authentication is successfull.
I am using a Windows XP SP2 client and JDK 1.5 and a Win2000 server.
The registry key "allowtgtsessionkey" on the client has been set to 0x01 as recommended by
C:\jdk15help\docs\guide\security\jgss\tutorials\Troubleshooting.html
The "Message stream modified" error seems to imply that
checksum used to verify the data packet didn't match what was expected or some packets are being corrupted.
I tried different default_checksum but to no avail.
Has anyone encountered this before?
My config file is as follows:
JaasSample {
com.sun.security.auth.module.Krb5LoginModule required
                    useTicketCache=true
                    renewTGT = true
                    debug=true;
and the debug log
Debug is true storeKey false useTicketCache true useKeyTab false doNotPrompt false ticketCache is null KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
Acquire TGT from Cache
Ticket could not be renewed : Message stream modified (41)
Principal is null
null credentials from Ticket Cache
Kerberos username [myname]:
Kerberos password for myname: mypassword
          [Krb5LoginModule] user entered username: myname
principal is [email protected]
Acquire TGT using AS Exchange
EncryptionKey: keyType=3 keyBytes (hex dump)=0000: 38 1A 02 C8 EA 5B EA 67
EncryptionKey: keyType=1 keyBytes (hex dump)=0000: 38 1A 02 C8 EA 5B EA 67
EncryptionKey: keyType=16 keyBytes (hex dump)=0000: D5 F1 D5 DF AD 67 37 5D 3B AB A2 AE 89 1F 13 F1 .....g7];.......
0010: FB EA AB AB D3 52 40 D6
Commit Succeeded