在CentOS中随处使用团队资源管理器进行Kerberos身份验证

时间:2014-10-11 15:57:44

标签: linux kerberos team-explorer-everywhere

我遇到了从各地的团队资源管理器进行身份验证的问题。我运行kinit myusername并在/ tmp中创建一个缓存文件。试图获得以下内容:

> tf get myproj -recursive
Access denied connecting to TFS server http://[removed] (authenticating as mydomain\myusername)

然后询问我的用户名。我给它相同的域名和用户名,但它接受了失败。我检查了下面的日志文件。

more teamexplorer-clc-2014.10.11-11.22.03.log 
2014-10-11 11:22:03,990 INFO  [main] (com.microsoft.tfs.jni.loader.NativeLoader) Loaded /opt/TEE-CLC-12.0.0/native/linux/x86/libnative_console.so from user-specified directory
2014-10-11 11:22:04,374 INFO  [main] (com.microsoft.tfs.jni.loader.NativeLoader) Loaded /opt/TEE-CLC-12.0.0/native/linux/x86/libnative_misc.so from user-specified directory
2014-10-11 11:22:04,867 INFO  [main] (com.microsoft.tfs.jni.loader.NativeLoader) Loaded /opt/TEE-CLC-12.0.0/native/linux/x86/libnative_auth.so from user-specified directory
2014-10-11 11:22:04,871 INFO  [main] (com.microsoft.tfs.jni.natives.NativeAuthMethods) Loaded GSSAPI library: libgssapi_krb5.so
2014-10-11 11:22:04,876 INFO  [main] (com.microsoft.tfs.client.clc.commands.Command) Using default credentials (supported and available)
2014-10-11 11:22:05,009 INFO  [main] (com.microsoft.tfs.core.config.httpclient.DefaultHTTPClientFactory) HttpClient configured for http://[removed], authen
ticating as logged in user
2014-10-11 11:22:07,556 ERROR [main] (com.microsoft.tfs.core.httpclient.HttpMethodDirector) Negotiate Scheme did not provided token
com.microsoft.tfs.core.httpclient.auth.AuthenticationException: Negotiate Scheme did not provided token
        at com.microsoft.tfs.core.httpclient.auth.NegotiateScheme.authenticate(NegotiateScheme.java:284)
        at com.microsoft.tfs.core.httpclient.auth.AuthorizationHeaderScheme.authenticateHost(AuthorizationHeaderScheme.java:34)
        [removed]
        at com.microsoft.tfs.client.clc.Application.run(Application.java:149)
        at com.microsoft.tfs.client.clc.vc.Main.main(Main.java:34)
2014-10-11 11:22:07,625 INFO  [main] (com.microsoft.tfs.core.httpclient.HttpMethodDirector) Failure authenticating with NEGOTIATE @[removed]

另见this similar thread。我的tf似乎没有使用profile命令。

1 个答案:

答案 0 :(得分:0)

问题是团队资源管理器到处都有错误的服务器。不知何故,当它在命令行要求身份验证时,它成功了。无论如何,这个问题与Kerberos无关。当我修复服务器名称(使用tf workspace -new -s:server workspace)时,它停止询问凭据。