Kerberos says JCE provider may not be installed

I am using the Krb5LoginModule from JDK1.4.2_04 (deployed with BEA Weblogic 8.1) to authenticate against Active Directory. Have been looking at this for an age. Initial issues were due to case sensitive user names (something I didn't expect since because windows login doesn't care).
Anyway the current issues is as follows:
Authentication failed:
JCE provider may not be installed. Cannot find any provider supporting DES/CBC/NoPadding
javax.security.auth.login.LoginException: JCE provider may not be installed. Cannot find any provider supporting DES/CBC/NoPadding
     at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:585)
     at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:475)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)
     at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
     at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
     at java.security.AccessController.doPrivileged(Native Method)
     at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
     at javax.security.auth.login.LoginContext.login(LoginContext.java:534)
     at ADLoginTest.main(ADLoginTest.java:45)
Caused by: KrbException: JCE provider may not be installed. Cannot find any provider supporting DES/CBC/NoPadding
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:285)
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:258)
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:335)
     at sun.security.krb5.EncryptionKey.<init>(DashoA6275:198)
     at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:569)
     ... 12 more
Caused by: java.security.NoSuchAlgorithmException: Cannot find any provider supporting DES/CBC/NoPadding
     at javax.crypto.Cipher.getInstance(DashoA6275)
     at sun.security.krb5.internal.crypto.a0.a(DashoA6275:283)
     ... 16 moreIn the Kerberos configuration file, specified on the command line I have the following authentication mechanism specified:
[libdefaults]
    default_realm = <removed/>
    default_tkt_enctypes = DES-CBC-MD5 DES-CBC-CRC
    default_tgs_enctypes = DES-CBC-MD5 DES-CBC-CRCThe funny thing is this worked previously, and has only come up today. The following jars are all on the classpath (inside eclipse JRE definition) rt.jar, jce.jar, sunjce_provider.jar and java.security appears to be configured correctly:
security.provider.1=sun.security.provider.Sun
security.provider.2=com.sun.net.ssl.internal.ssl.Provider
security.provider.3=com.sun.rsajca.Provider
security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.jgss.SunProviderAny ideas what could be the problem? I even tried to reboot just in case. Does this seem like an issue with the Java application(client) or on the Active Directory (server)?
Any help greatly appreciated ...

This worked for me!! <p>I had the same problem, it was working and I was trying various things (e.g. bouncy castle provider) to try and get RC4-HMAC(NT) encryption to work. And then the DES mode stopped working - I must have switched from the JDK to the JRE at some point. Both the JRE and the JDK have the same list of providers in the security policy file java.security - so why using the JDK works and the JRE doesn't is weird. Hopefully it is just an eclipse thing - I'll have to deploy this stuff to clients with only the JRE one day.
<p>
Thanks for that tip!

Similar Messages

  • "Provider cannot be found.It may not be installed properly"

    Hi All,
    I am running into this error "Provider cannot be found.It may not be installed properly" while I am trying to connect to Oracle from Excel VBA.
    I had installed both Oracle 10.1 and Oracle 10.2 in the same machine and is working with .NET applications.My .NET applications works fine.But when I try to connect from within the EXCEL VBA,it gives me this error.
    This is my oracle client folder structure
    Oracle 10.1 -> C:\Program Files\Oracle\product\10.1.0\Client_1
    Oracle 10.2 client -> C:\Program Files\Oracle\product\10.2.0\Client_2
    Oracle 10.2 ODAC -> C:\Program Files\Oracle\product\10.2.0\Client_1
    As part of working around this error,I have uninstalled my 10.2 and now I just have 10.1 in my local machine.
    This is the code snippet where the error occurs in VBA
    Set Conn = New ADODB.Connection
    Conn.ConnectionString = "Provider=OraOLEDB.Oracle;Data Source=datasource;User ID=userid;Password=pwd;CacheType=Memory"
    Conn.ConnectionTimeout = 60
    Conn.Open
    I would really appreciate any help as I have been working around this erro for the last 2 days
    Thanks much!

    Hi,
    Why do you have 3 Oracle homes?
    Mutliple Oracle homes on Windows is a pain at best. Oracle's OLEDB and ODBC drivers require that their home be first in your PATH.
    Generally you can have as many homes as you want, but can only USE the home that's first in your PATH, and things like OraOLEDB, being a com object, can only be installed into a single home.
    In your registry, what does HKEY_CLASSES_ROOT\CLSID\{3F63C36E-51A3-11D2-BB7D-00C04FA30080}\InprocServer32\(Default) point to (the entry for Oracle's OLEDB provider)? Is it the same home that's first in your path if you open a dos prompt and type PATH?
    Hope it helps
    Greg

  • Error: provider may not be signed by a trusted party

    I am running with the latest Cryptix JCE, and I getting "provider may not be signed by a trusted party" error when using the Cipher Engine. I ran with the supplied cryptix-jce-provider.jar file and one that is signed by me using a code signing certificate obtained from SUN. I have the same error in both cases. The error message said that the jar should not be signed by a trusted party, but I think it is supposed to mean it is not signed by a trusted party. Does anybody know what's is going on, and why am I getting this error?
    - Tak

    I do not have this problem if I am running as root. But if I am a normal user, I am getting this error or "cannot find any provider supporting RSA/ECB/PKCS#1 depending on what I am doing. Please note that I am putting the provider jar file in the jre/lib/ext directory. If I run my test with the provider specified as part of the classpath, then it worked OK regardless who I am. Does anybody have any ideas?
    - Tak Sze

  • My iPod touch 5th gen isn't charging and when I plug my working charger in that I've always used a message pops up that says "This accessory may not be supported". So can I send it in for a new one if I have a warranty?

    For Christmas, my older sister got me a portable charger for my iPod. I'm not sure if it was capable with apple products, but it charged my iPod when I used it. My brother came upstairs and took my portable charger from me, so I went to go use my wall charger. The wall charger I have has always worked and it charges my mom's iPhone, so the problem I have isn't my charger. After I plugged my iPod in my charger, a message popped up saying "This accessory may not be supported". I was confused because this never has happened before, so I tried my portable charger after I got the message. The portable charger didn't charge my iPod anymore apparently after I tried my charger. All this happened the day after Christmas, so it's almost been a month without my iPod charging properly. My iPod does charge, but only when I plug it in halfway and am about to turn it all the way off. The only way I get it to charge is when I plug it in real fast as soon as I turn my iPod completely off. I've also restarted my iPod, cleaned out the charging area, asked people at stores that work with technology, and etc, so if someone could help me resolve this problem that would be legit because I use my iPod on a daily basis.

    That message is usually due to a bad cable.
    Not Charge
    - See:    
    iPod touch: Hardware troubleshooting
    iPhone and iPod touch: Charging the battery
    If you can’t charge your iPhone, iPad, or iPod touch
    - Try another cable. The cable for 5G iPod (lightning connector) seems to be more prone to failure than the older cable.
    - If a 5G iPod               
    Iphone 5 lightning port charging problem - SOLUTION!
    - Try another charging source
    - Inspect the dock connector on the iPod for bent or missing contacts, foreign material, corroded contacts, broken, missing or cracked plastic.
    - Make an appointment at the Genius Bar of an Apple store.
      Apple Retail Store - Genius Bar
    or send it in to Apple. See:     
    Service Answer Center - iPod

  • When i try downloading adobe pro i am getting an error message that is saying: The application could not be installed because the installer file is damaged. Try obtaining a new installer file from the application author.

    when i try downloading adobe pro i am getting an error message that is saying: The application could not be installed because the installer file is damaged. Try obtaining a new installer file from the application author.

    Hi Kashmore,
    Seems like the downloaded file was corrupt that could be because of either network restriction or the anti virus might have blocked it. My suggestion would be to try and download the product either by turning off the Antivirus or try a different network.
    Cheers,
    Kartikay Sharma

  • Hi,my iphone 5 is not getting charged,but i can connect to itunes in usb.but when i put for charging it is is saying this accessory may not be supported,please help

    my iphone5 is not getting charged,but if i connect to my computer via usb i can use itunes and other all functions.normally if i connect it is charging battery also,but now it is not charging .it is saying this accessory may not be supported and the cable iam using orginal apple cable, alsoiam loosing my battery percentage.please help me

    Hello beenafromgbr,
    Thanks for using Apple Support Communities.
    For more information on this, take a look at:
    Troubleshooting iPhone, iPad, and iPod touch accessories.
    http://support.apple.com/kb/ts2634
    Best of luck,
    Mario

  • I'm trying to connect to my work's VPN.  I am connected to the VPN, but I cannot access the server. I keep getting a message that says the server may not exist or is unavailable.  I know that's not the case because my coworkers are connected. Can someone

    I'm trying to connect to my work's VPN.  I am connected to the VPN, but I cannot access the server. I keep getting a message that says the server may not exist or is unavailable.  I know that’s not the case because my coworkers are connected. Can someone please help me? 

    I have the same problem. It is only with tv shows and only with programs I have downloaded after the software update.
    Apple support sent me the above link too....but it doesn't solve the problem...my computer is authorized and the content is in my library and will play on my Mac air, but it will not sync the tv shows, it keeps saying my computer isn't authorized for it.
    No answers here, but you are definitely not alone with this issue.

  • HT201364 I have macbook pro 15", 2,6 ghz, 8gb, osx 10.9 but the pop up window says that maverics can not be installed on this computer. why is that? thank you

    I have macbook pro 15", 2,6 ghz, 8gb, osx 10.9 but the pop up window says that maverics can not be installed on this computer. why is that? thank you

    Check here >  OS X Mavericks: System Requirements

  • Failed to create an IDataAdapter object. This provider may not be fully supported with the Execute SQL Task

    I executed a simple query inside an execute SQL task - 
    SELECT col1, col2
    from thetable
    where code = ?
    order by id asc
    Exec sql task - ADO.NET connection
    parameter "code" is an int32 in SSIS and int32 in parameter mapping of exec sql task.
    It works fine in SQL server, but in SSIS it causes the error - 
    [Execute SQL Task] Error: Executing the query "SELECT col1, col2
    from thet..." failed with the following error: "Failed to create an IDataAdapter object. This provider may not be fully supported with the Execute SQL Task. Error message 'Incorrect syntax near '?'.'.". Possible failure reasons: Problems with
    the query, "ResultSet" property not set correctly, parameters not set correctly, or connection not established correctly.
    How do I fix this error ? 

    Thanks. I think it was sqlclient. I changed it to OLEDB to avoid that issue. Btw, what is this "provider" ?
    Hi blastoSO,
    To check which provider is used by the current ADO.NET Connection Manager, you can open the “Configure ADO.NET Connection Manager” window, and check the “Managed Provider” option of each Data connection.
    In an Execute SQL Task, if the managed provider is “System.Data.SqlClient”, we should use the rule for the ADO.NET connection type in the following table. If the managed provider is “System.Data.Oledb” or “System.Data.Odbc”, it actually uses the OLE DB provider
    or ODBC provider, so we should use the rule for the OLE DB or OBC rule in the following table:
    Reference:
    http://technet.microsoft.com/en-us/library/cc280502.aspx
    Regards,
    Mike Yin
    TechNet Community Support

  • I cannot set up my emails it keeps saying This account may not be able to send or receive emails do you still want to say, what am I doing wrong?

    I am trying to set up my emails - and when I sent a test it went to my old IPhone - when I re put all the information into my new phone it says This account may not be able to send or receive emails do you want to  save.
    What am I doing wrong?

    Good morning to all.
    Well I spent many hours last night trying to get my Mail going on my iPad. I phoned Yahoo. After listening music for 3/4 of hour, they gave me so called advise, which I had already tried 25 times. I exchanged emails with Apple support team. They said I did not have support arrangement, so they could not help me unless I buy one time support that costs $30.
    I can do emailing through Safari, but It is not up to current standard after I am so used to using "Mail" feature on iPad.
    I am now in a desperation state, so I am thinking to buy one time support from Apple.
    Just so someone might be thinking about Downloading Yahoo app for Mail, you should know it would not help me because my iPad iSO is 5.1.1. It has to be iSO 6.0 or higher. So I thought rather than spending $30 on one time support from Apple, I just trade in my iPad to get newer iPad.
    Is there anyone out there who might save me $30?   Thank you everyone for thinking about my problem.  BcCanip

  • When I plug in my iPhone 5s with the new 7.1 to my laptop it says "this feature may not be supported"

    When I plug in my iPhone 5s with the new 7.1 to my laptop it says "this feature may not be supported"

    fighter19lisa wrote:
    that only makes it say its synced, when its not.
    No, it does not.  It transfers purchases from the iDevice to the computer.  The computer must be authorized for the Apple ID that the content was acquired with.
    fighter19lisa wrote:
    my playlists wont show up on the phone.
    Are they selected to sync?  Is Manually Manage content on the device selected?
    fighter19lisa wrote:
    i had to change my password for my aol account again and i still cannot get my email on my phone to even work
    What does that have to do with syncing content to the device?  FYI, nothing.

  • Apple iPhone 5 cable saying "this accessory may not be supported"?

    Using the Apple Lighting cable I specifically purchased off the Apple site with my Apple iPhone 5 (IOS 8..1.2) so that I would have at least one charge cable that would work with my computer and my phone. But at last I have been mistaken. Everything I plug my phone in with the Apple cable it informs he that "this accessory may not be supported"? Does anyone know a solution to this problem. I know i've emailed Apple about this once before and magically it started working for that night but its yet to wok since with my computer. I know the cable works just fine as I use it ever day to charge my phone with my wall adapter so I know the cable itself must not be the problem.

    Hey A.R.R,
    If you are having an issue with an alert saying that the cable is not supported for use with your iPhone, I would suggest that you troubleshoot using the steps in this article - 
    If you can’t charge your iPhone, iPad, or iPod touch - Apple Support
    Specifically -
    If you see an alert
    When you plug in your device, you might see one of these alerts:
    “This cable or accessory is not certified and may not work reliably with this iPhone.”
    “This accessory is not supported by this device.”
    If you see one of these alerts, unplug your device try and these steps:
    Look at the connector at the bottom of your device and make sure it’s free of debris, then reconnect the USB cable.
    If you still see an alert, try a different USB cable or charger.
    Get more help
    If your device still doesn't charge or you still see an alert after trying the steps above, contact Apple Support.
    Be well,
    Brett L 

  • Tried to install OS X and it says OS X could not be installed.  File system or resist failed. Quit installer to restart and try again.  It keeps me I a circle. How can I truly quit the install and go back to where I was. My time machine not working

    i am in a loop.  I can't get past this point  OS X could not be installed on your computer.  when I go to quit the installer I get are you sure you want to quit OS X  installer?  To quit, click choose startup disk to select a startup diskbfor your computer if you need to restart click restart.  I don't have a start up disk and my time machine evidently isn't workig either.  Does this mean I have lost everything???  Please someone help!!!  I am not a tech person at all and am freaking out right now.  How do I remove the download and just go back to what I had.  Seriously!!! 

    Not sure what the iOS is.
    iOS cannot run on any Mac computer, just Apple's mobile devices. You have some version of Mac OS X. To find it, please do "About this Mac" from your Apple menu and post what you find along wiuth the processor description.
    Some iMacs cannot run newer versions of the Mac OX. That's why we need more info about your specific model. Now that you have the serial number, enter it into the Apple support page to get it translated into a model type:
    https://selfsolve.apple.com/agreementWarrantyDynamic.do
    Report what that says for your model BUT DO NOT post your serial number for security reasons.

  • I've had my iphone 5s since march 2014  and I've been using the same charger it came with. for the last two weeks ive been getting a message saying the accessory may not support the device. how is that possible?

    How come I keep getting a message saying that the accessory may not support the device?  I've been using the same charger that came in the box with the phone. Now it doesn't charge at all.

    Then take the cable, the plug and your iPhone to an Apple Store genius bar it is still  under the 12 month warranty

  • Cannot update Mozilla. It says "The Update could not be installed (patch apply failed)"

    When updating Mozilla, I get this message:
    "The Update could not be installed (patch apply failed)".
    What should be done?

    With that one, I'd try updating using a .dmg installer downloaded from the Apple Website:
    http://www.apple.com/itunes/download/

Maybe you are looking for