Easy kerberos test system setup?

Question

Hi!
I wonder, how I can setup up an easy developer kerberos system?
What is used by you?
ApacheDS?
Windows?
Linux MIT Kerberos?
Some tips for setup up developer kerberos system?
Thanks a lot!
With regards

Answer 1

I tried to uses ApacheDS 1.0.2 for Kerberos Service now.
Trying to use this documentation:
[http://directory.apache.org/apacheds/1.0/kerberos-protocol-configuration.html|http://directory.apache.org/apacheds/1.0/kerberos-protocol-configuration.html]
The after part does not work:
ERROR [org.apache.directory.daemon.Bootstrapper] - Failed on org.apache.directory.server.Service.init(InstallationLayout, String[])
org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'kdcConfiguration' defined in URL [file:/C:/Programme/apacheds-1.0.2/conf/server.xml]:
Error setting property values; nested exception is org.springframework.beans.NotWritablePropertyException:
Invalid property 'enabled' of bean class [org.apache.directory.server.kerberos.kdc.KdcConfiguration]:
Bean property 'enabled' is not writable or has an invalid setter method:
Does the parameter type of the setter match the return type of the getter?
org.springframework.beans.NotWritablePropertyException:
Invalid property 'enabled' of bean class [org.apache.directory.server.kerberos.kdc.KdcConfiguration]:
Bean property 'enabled' is not writable or has an invalid setter method:
Does the parameter type of the setter match the return type of the getter?So I uncomment the two kdc lines in server.xml:
<beans>
  <bean id="environment" class="org.springframework.beans.factory.config.PropertiesFactoryBean">
    <property name="properties">
      <props>
        <prop key="java.naming.security.authentication">simple</prop>
        <prop key="java.naming.security.principal">uid=admin,ou=system</prop>
        <prop key="java.naming.security.credentials">secret</prop>
        <prop key="kdc.entryBaseDn">ou=users,dc=example,dc=com</prop>
        <prop key="kdc.java.naming.security.credentials">secret</prop>
        <!--<prop key="changepw.entryBaseDn">ou=users,dc=example,dc=com</prop>--> And uncomment this lines for loading LDIF files on startup:
    <property name="ldifDirectory">
      <value>../ldif</value>
    </property>
    <property name="ldifFilters">
      <list>
        <bean class="org.apache.directory.server.protocol.shared.store.Krb5KdcEntryFilter"/>
      </list>
    </property>Using LDIF from [http://thejavamonkey.blogspot.com/2008/07/using-apache-directory-server-as-kdc.html|http://thejavamonkey.blogspot.com/2008/07/using-apache-directory-server-as-kdc.html]
With this additional lines:
# Users store
dn: ou=users,dc=example,dc=com
objectClass: top
objectClass: organizationalUnit
ou: usersBut no kerberos is running.
I got all open ports with "netstat -a -n -b":
  Proto  Locale address         remote address          Status
TCP    0.0.0.0:10389          0.0.0.0:0              ABHÖREN
[apacheds.exe]
TCP    127.0.0.1:30003        0.0.0.0:0              ABHÖREN
[apacheds.exe]
TCP    127.0.0.1:1075         127.0.0.1:1076         HERGESTELLT
[apacheds.exe]
TCP    127.0.0.1:1076         127.0.0.1:1075         HERGESTELLT
[apacheds.exe]
TCP    127.0.0.1:1083         127.0.0.1:1084         HERGESTELLT
[apacheds.exe]
TCP    127.0.0.1:1084         127.0.0.1:1083         HERGESTELLT
[apacheds.exe]30003 is the shutdown port according to [http://mail-archives.apache.org/mod_mbox/directory-commits/200601.mbox/%[email protected]%3E|http://mail-archives.apache.org/mod_mbox/directory-commits/200601.mbox/%[email protected]%3E]
shutdownPort = AvailablePortFinder.getNextAvailable( 30003 );10389 is the LDAP port.
Any idea?
Edited by: Grogario on Sep 5, 2008 2:41 AM