[22994] in Kerberos
Re: Kerberos and apache problem
daemon@ATHENA.MIT.EDU (Achim Grolms)
Fri Dec 3 18:24:31 2004
From: Achim Grolms <achim@grolmsnet.de>
Date: Fri, 3 Dec 2004 01:51:26 +0100
Message-ID: <coodae$rp8$02$1@news.t-online.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
nightolo <nightolo@gmail.com> wrote:
> I configured all of these stuff but when I tried to log on with apache
> with Basic Authentication I got "gss_acquire_cred() failed:
> Miscellaneous failure (No principal in keytab matches desired name)"
> in error.log.
Have you checked that your keytab is correct?
> Yes, Basic Authentication, I'm not mistaken; I read the fine manual
> and I found that browser authenticate itself with apache Basic
> Authentication and, after this passage, Apache authenticate this user
> with KDC and, get the ticket.
No ticket, in case of "Basic Auth" Apache talks
with KDC to verify username/password he has got from browser.
> I got a trouble in my mind because I turn on KrbMethodNegotiate On
> (the real kerberos sign-on authentication) but, as README says, apache
> don't talk with KDC. Is it correct?
In case of real Kerberos Authentication
(SPNEGO, KrbMethodNegotiate On) the Apache does not talk
to the KDC.
> By the way, here have anyone done a setup with a similar enviroment?
Yes, me
Find my tutorial at
<http://www.grolmsnet.de/kerbtut/>
Achim
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
