[22966] in Kerberos
Kerberos and apache problem
daemon@ATHENA.MIT.EDU (nightolo)
Wed Dec 1 16:19:57 2004
From: nightolo@gmail.com (nightolo)
Date: 1 Dec 2004 12:35:07 -0800
Message-ID: <19cfc88b.0412011235.5e51c6f5@posting.google.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Hi all,
we got a problem during a setup with apache; we have got a domain
controller with active directory (windows 2003 server) and kerberos
authentication but, *first problem*, when we log onto domain it
doesn't release any ticket (we check this problem with krbtray
application and klist.exe).
By the way another is the real problem: we installed an apache 2.0 and
last version of mod_auth_kerberos compiled following guidelines of
author's homepage. The aim is to get a single sign-on authentication (
unf =| ); it should be possible to authenticate on apache with
KerberosV5 authentication and store credentials and ticket while
windows session ends.
I configured all of these stuff but when I tried to log on with apache
with Basic Authentication I got "gss_acquire_cred() failed:
Miscellaneous failure (No principal in keytab matches desired name)"
in error.log.
Yes, Basic Authentication, I'm not mistaken; I read the fine manual
and I found that browser authenticate itself with apache Basic
Authentication and, after this passage, Apache authenticate this user
with KDC and, get the ticket.
I got a trouble in my mind because I turn on KrbMethodNegotiate On
(the real kerberos sign-on authentication) but, as README says, apache
don't talk with KDC. Is it correct?
By the way, here have anyone done a setup with a similar enviroment?
I appreciate any feedback, thanks in advance
nightolo.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
