[23473] in Kerberos

home help back first fref pref prev next nref lref last post

... A token was invalid ...

daemon@ATHENA.MIT.EDU (Jellbauer Jakob)
Thu Mar 3 13:26:52 2005

content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Date: Thu, 3 Mar 2005 19:25:59 +0100
Message-ID: <5DB4FE726A89044480C510CEAD1B471762798A@DEMUC-CLU1-EX1.interhyp-intern.de>
From: "Jellbauer Jakob" <Jakob.Jellbauer@interhyp.de>
To: <kerberos@mit.edu>
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu

Hello list,

iīve got Kerberos Single Sign On working with Apache 2.0.53 , Active Directory on Win2000   and XP Clients.

First i thought it works great, but then these messages shown up in the apache errorlog :

.. gss_accept_sec_context() failed: A token was invalid (Token header is malformed or corrupt)...

The strange thing is , that itīs a random problem, a few request before the client authenticates normally as USER@DOMAIN.INTERN.

I think itīs a problem with sites, that are often reloaded , for example we are testing a "Active Desktop" that posts some Phone infos in a DB.

But not only with Active Desktop, also normal IE Browser Request are producing this error, and the bad bad bad password dialog appears ...

What can i do to make it work perfect ?

Thanks a lot for your suggestions 

Greetings 

Jakob

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post