linux - CentOS 中随处使用 Team Explorer 进行 Kerberos 身份验证

Question

我在从各处的团队资源管理器进行身份验证时遇到问题。我运行 kinit myusername 并在/tmp 中创建一个缓存文件。尝试获取给了我以下内容:

> tf get myproj -recursiveAccess denied connecting to TFS server http://[removed] (authenticating as mydomain\myusername)

然后它会询问我的用户名。我给它提供了与刚刚失败的相同的域和用户名，并且它接受了。我检查了下面的日志文件。

more teamexplorer-clc-2014.10.11-11.22.03.log 2014-10-11 11:22:03,990 INFO  [main] (com.microsoft.tfs.jni.loader.NativeLoader) Loaded /opt/TEE-CLC-12.0.0/native/linux/x86/libnative_console.so from user-specified directory2014-10-11 11:22:04,374 INFO  [main] (com.microsoft.tfs.jni.loader.NativeLoader) Loaded /opt/TEE-CLC-12.0.0/native/linux/x86/libnative_misc.so from user-specified directory2014-10-11 11:22:04,867 INFO  [main] (com.microsoft.tfs.jni.loader.NativeLoader) Loaded /opt/TEE-CLC-12.0.0/native/linux/x86/libnative_auth.so from user-specified directory2014-10-11 11:22:04,871 INFO  [main] (com.microsoft.tfs.jni.natives.NativeAuthMethods) Loaded GSSAPI library: libgssapi_krb5.so2014-10-11 11:22:04,876 INFO  [main] (com.microsoft.tfs.client.clc.commands.Command) Using default credentials (supported and available)2014-10-11 11:22:05,009 INFO  [main] (com.microsoft.tfs.core.config.httpclient.DefaultHTTPClientFactory) HttpClient configured for http://[removed], authenticating as logged in user2014-10-11 11:22:07,556 ERROR [main] (com.microsoft.tfs.core.httpclient.HttpMethodDirector) Negotiate Scheme did not provided tokencom.microsoft.tfs.core.httpclient.auth.AuthenticationException: Negotiate Scheme did not provided token        at com.microsoft.tfs.core.httpclient.auth.NegotiateScheme.authenticate(NegotiateScheme.java:284)        at com.microsoft.tfs.core.httpclient.auth.AuthorizationHeaderScheme.authenticateHost(AuthorizationHeaderScheme.java:34)        [removed]        at com.microsoft.tfs.client.clc.Application.run(Application.java:149)        at com.microsoft.tfs.client.clc.vc.Main.main(Main.java:34)2014-10-11 11:22:07,625 INFO  [main] (com.microsoft.tfs.core.httpclient.HttpMethodDirector) Failure authenticating with NEGOTIATE @[removed]

另请参阅 this similar thread 。我的 tf 似乎无法使用配置文件命令。

Answer 1

问题是各地的团队资源管理器都有错误的服务器。不知何故，当它要求在命令行进行身份验证时，它成功了。无论如何，这个问题与 Kerberos 无关。当我修复服务器名称(使用 tfworkspace -new -s:serverworkspace)时，它停止要求提供凭据。