Consuming a .NET kerberized web service using the spnego.sourceforge.net open source library

[Manuel Leiria]

Hi there,


I have one WebLogic server that needs to access a web service in one iis server and this web server is protected by Kerberos. My code works fine in the development environment where kerberos and ntlm are both activated (but the mechanism choosen is kerberos). In production environment, ntlm is disabled (I was told that this is the main difference beetween the two environments). Now, what happens is that, in production mode instead of getting an Authorization Header: Negociate, I receive an Authorization Header: Kerberos and, of course, I receive from the code one

java.lang.UnsupportedOperationException: Negotiate or Basic Only:Kerberos

from this method:

    
public static SpnegoAuthScheme getAuthScheme(final String header) {
System.out.println("HEADER-->" header);
if (null == header || header.isEmpty()) {
LOGGER.finer("authorization header was missing/null");
return null;

} else if (header.startsWith(Constants.NEGOTIATE_HEADER) ) {
final String token = header.substring(Constants.NEGOTIATE_HEADER.length() 1);
System.out.println("TOKEN-->" token);
return new SpnegoAuthScheme(Constants.NEGOTIATE_HEADER, token);
}
else if (header.startsWith(Constants.BASIC_HEADER)) {
final String token = header.substring(Constants.BASIC_HEADER.length() 1);
return new SpnegoAuthScheme(Constants.BASIC_HEADER, token);

} else {
throw new UnsupportedOperationException("Negotiate or Basic Only:" + header);
}
}

in the SpnegoProvider class.

Now, the guys here in my company (the iis administrators) know nothing about kerberos (I think the've configured the iis/kerberos/AD following some kind of next, next, next install, if you know what I mean).
The final question is: How can I workaround this exception??





Just adding some more info on the subject

In the code posted above,
Development env:

System.out.println("HEADER-->" header);  

gives

HEADER-->Negotiate oYGLMIGIoAMKAQChCwYJKoZIhvcSAQIConQEcmBwBgkqhkiG9xIBAgICAG9hMF+gAwIBBaEDAgEPolMwUaADAgEBokoESLvSJHwvhCjn0DcANiuuv2sFr+Q4wbFPuRjfnyRnzFpjMTS5UpYEcrT9iySt5QjdptKsUiFK8W8y1W2MNIUUtPQkZ35//8UjOA==

and

System.out.println("TOKEN-->" token); 

gives

TOKEN-->oYGLMIGIoAMKAQChCwYJKoZIhvcSAQIConQEcmBwBgkqhkiG9xIBAgICAG9hMF+gAwIBBaEDAgEPolMwUaADAgEBokoESLvSJHwvhCjn0DcANiuuv2sFr+Q4wbFPuRjfnyRnzFpjMTS5UpYEcrT9iySt5QjdptKsUiFK8W8y1W2MNIUUtPQkZ35//8UjOA==

In Production env.,

System.out.println("HEADER-->" header);  

gives

HEADER-->Kerberos

and
there's no token!!!

thanks for any light!!!

ML