How to pass KDC server address and REALM in Krb5LoginModule ??

Question

Hi All,
I want to pass KDC server address and REALM in Krb5LoginModule() with using configuration file or command line options.
I tried with initialize method of Krb5LoginModule() with passing KDC configuration parameters in sharedState.
Map state = new HashMap();
state.put("javax.security.auth.login.name", "user");
state.put("javax.security.auth.login.password", "pass");
state.put("java.security.krb5.realm", "TEST.COM");
state.put("java.security.krb5.kdc", "kdc.test.com");
Map options = new HashMap();
options.put("debug", "true");
options.put("tryFirstPass", "true");
options.put("useTicketCache", "true");
options.put("doNotPrompt", "true");
options.put("storePass", "false");
options.put("forwardable", "true");
Krb5LoginModule login = null;
try {
login = new Krb5LoginModule();
login.initialize(new Subject(), new TextCallbackHandler(), state, options);
if(login.login()){
login.commit();
But i getting this exception:
[root@localhost TEST]# java JaasAcn1
Debug is true storeKey false useTicketCache true useKeyTab false doNotPrompt true ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is true useFirstPass is false storePass is false clearPass is false
Acquire TGT from Cache
Principal is null
null credentials from Ticket Cache
username from shared state is user
username from shared state is user
Exception in thread "main" java.lang.ClassCastException: java.lang.String
at com.sun.security.auth.module.Krb5LoginModule.promptForPass(Krb5LoginModule.java:773)
at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:654)
at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:503)
at JaasAcn1.main(JaasAcn1.java:31)
Please give some pointers to solve the problem.
Thanks in advance.
Regards,
raj singh

Answer 1

The exception
Exception in thread "main" java.lang.ClassCastException: java.lang.String
at com.sun.security.auth.module.Krb5LoginModule.promptForPass(Krb5LoginModule.java:773)
at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:654)
at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:503)
at JaasAcn1.main(JaasAcn1.java:31)clearly shows that your format for password is wrong in the shared state. String is evil, use char[] instead. Here it should be "pass".toCharArray().