Issue

• Why does JBoss Negotiation throw a GSSException Checksum failed error?

11:16:16,267 DEBUG [org.jboss.security.negotiation.spnego.SPNEGOLoginModule] (ajp-redhatdev/192.168.1.2:8009-2) Logged in 'host' LoginContext
11:16:16,267 DEBUG [org.jboss.security.negotiation.spnego.SPNEGOLoginModule] (ajp-redhatdev/192.168.1.2:8009-2) Creating new GSSContext.
11:16:16,277 INFO  [stdout] (ajp-redhatdev/192.168.1.2:8009-2) Found key for HTTP/imadev.redhat.com@REDHAT.COM(23)
11:16:16,279 INFO  [stdout] (ajp-redhatdev/192.168.1.2:8009-2) Entered Krb5Context.acceptSecContext with state=STATE_NEW
11:16:16,282 INFO  [stdout] (ajp-redhatdev/192.168.1.2:8009-2) >>> EType: sun.security.krb5.internal.crypto.ArcFourHmacEType
11:16:16,284 ERROR [stderr] (ajp-redhatdev/192.168.1.2:8009-2) Checksum failed !
11:16:16,285 INFO  [stdout] (ajp-redhatdev/192.168.1.2:8009-2)              [Krb5LoginModule]: Entering logout
11:16:16,285 INFO  [stdout] (ajp-redhatdev/192.168.1.2:8009-2)              [Krb5LoginModule]: logged out Subject
11:16:16,285 TRACE [org.jboss.security.negotiation.spnego.SPNEGOLoginModule] (ajp-redhatdev/192.168.1.2:8009-2) Result - GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)
11:16:16,285 ERROR [org.jboss.security.negotiation.spnego.SPNEGOLoginModule] (ajp-redhatdev/192.168.1.2:8009-2) Unable to authenticate: GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)
        at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:741) [rt.jar:1.6.0_31]
        at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:323) [rt.jar:1.6.0_31]
        at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:267) [rt.jar:1.6.0_31]
        at org.jboss.security.negotiation.spnego.SPNEGOLoginModule$AcceptSecContext.run(SPNEGOLoginModule.java:396) [jboss-negotiation-spnego-2.2.0.SP1-redhat-1.jar:2.2.0.SP1-redhat-1]
        at java.security.AccessController.doPrivileged(Native Method) [rt.jar:1.6.0_31]
        at javax.security.auth.Subject.doAs(Subject.java:337) [rt.jar:1.6.0_31]
        at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.spnegoLogin(SPNEGOLoginModule.java:237) [jboss-negotiation-spnego-2.2.0.SP1-redhat-1.jar:2.2.0.SP1-redhat-1]
        at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.innerLogin(SPNEGOLoginModule.java:194) [jboss-negotiation-spnego-2.2.0.SP1-redhat-1.jar:2.2.0.SP1-redhat-1]
        at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.login(SPNEGOLoginModule.java:137) [jboss-negotiation-spnego-2.2.0.SP1-redhat-1.jar:2.2.0.SP1-redhat-1]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.6.0_31]
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) [rt.jar:1.6.0_31]
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) [rt.jar:1.6.0_31]
        at java.lang.reflect.Method.invoke(Method.java:597) [rt.jar:1.6.0_31]
        at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769) [rt.jar:1.6.0_31]
        at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186) [rt.jar:1.6.0_31]
        at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683) [rt.jar:1.6.0_31]
        at java.security.AccessController.doPrivileged(Native Method) [rt.jar:1.6.0_31]
        at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680) [rt.jar:1.6.0_31]
        at javax.security.auth.login.LoginContext.login(LoginContext.java:579) [rt.jar:1.6.0_31]
        at org.jboss.security.authentication.JBossCachedAuthenticationManager.defaultLogin(JBossCachedAuthenticationManager.java:449) [picketbox-infinispan-4.0.9.Final-redhat-1.jar:4.0.9.Final-redhat-1]
        at org.jboss.security.authentication.JBossCachedAuthenticationManager.proceedWithJaasLogin(JBossCachedAuthenticationManager.java:383) [picketbox-infinispan-4.0.9.Final-redhat-1.jar:4.0.9.Final-redhat-1]
        at org.jboss.security.authentication.JBossCachedAuthenticationManager.authenticate(JBossCachedAuthenticationManager.java:371) [picketbox-infinispan-4.0.9.Final-redhat-1.jar:4.0.9.Final-redhat-1]
        at org.jboss.security.authentication.JBossCachedAuthenticationManager.isValid(JBossCachedAuthenticationManager.java:160) [picketbox-infinispan-4.0.9.Final-redhat-1.jar:4.0.9.Final-redhat-1]
        at org.jboss.as.web.security.JBossWebRealm.authenticate(JBossWebRealm.java:214) [jboss-as-web-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
        at org.jboss.security.negotiation.NegotiationAuthenticator.authenticate(NegotiationAuthenticator.java:187) [jboss-negotiation-common-2.2.0.SP1-redhat-1.jar:2.2.0.SP1-redhat-1]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:455) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) [jboss-as-web-7.1.2.Final-redhat-1.jar:7.1.2.Final-redhat-1]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:505) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:452) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:931) [jbossweb-7.0.16.Final-redhat-1.jar:]
        at java.lang.Thread.run(Thread.java:662) [rt.jar:1.6.0_31]
Caused by: KrbException: Checksum failed
        at sun.security.krb5.internal.crypto.ArcFourHmacEType.decrypt(ArcFourHmacEType.java:85) [rt.jar:1.6.0_31]
        at sun.security.krb5.internal.crypto.ArcFourHmacEType.decrypt(ArcFourHmacEType.java:77) [rt.jar:1.6.0_31]
        at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:168) [rt.jar:1.6.0_31]
        at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:268) [rt.jar:1.6.0_31]
        at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:134) [rt.jar:1.6.0_31]
        at sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:79) [rt.jar:1.6.0_31]
        at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:724) [rt.jar:1.6.0_31]
        ... 34 more
Caused by: java.security.GeneralSecurityException: Checksum failed
        at sun.security.krb5.internal.crypto.dk.ArcFourCrypto.decrypt(ArcFourCrypto.java:388) [rt.jar:1.6.0_31]
        at sun.security.krb5.internal.crypto.ArcFourHmac.decrypt(ArcFourHmac.java:74) [rt.jar:1.6.0_31]
        at sun.security.krb5.internal.crypto.ArcFourHmacEType.decrypt(ArcFourHmacEType.java:83) [rt.jar:1.6.0_31]
        ... 40 more