[24455] in Kerberos
Re: Fedora2/Apache2 and Key Version Error
daemon@ATHENA.MIT.EDU (Markus Moeller)
Mon Aug 15 15:25:15 2005
From: "Markus Moeller" <huaraz@moeller.plus.com>
Date: Fri, 12 Aug 2005 21:50:19 +0100
Message-ID: <42fd0b95$0$1233$ed2619ec@ptn-nntp-reader01.plus.net>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Jose,
If I understand you right you are using Apache2 with mod_auth_gssapi_krb5
or similar and receive a NTLM token from IE, which can't be handled by the
underlying Kerberos libraries.
You should make sure that:
1) You have IE configured to use windows integrated authentication (see
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecure/html/http-sso-1.asp)
2) Have a keytab with a HTTP/servername on the Apache2 server
3) check with kerbtray that your client gets the HTTP/servername service
ticket
Regards
Markus
""Jose M. Fernandez A."" <jose.fernandez@reniec.gob.pe> wrote in message
news:ADC261401C904B43A262F3DAF576097586FCD4@mailsa.reniecperu.net...
> Hello myu friend, i wan t to know if you resolve this problem:
> kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
> kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
> Acquiring creds for HTTP/fqdn.domain.com at REALM
> <https://mailman.mit.edu/mailman/listinfo/kerberos> Verifying client data
> using KRB5 GSS-API Verification returned code 589824 Warning: received
> token seems to be NTLM, which isn't supported... gss_accept_sec_context()
> failed: A token was invalid (Token header is malformed or corrupt)
> kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
> kerb_authenticate_user_krb5pwd ret=0 user=username at REALM
> <https://mailman.mit.edu/mailman/listinfo/kerberos> authtype=Basic
>
>
>
> If, you can help, please i will be very gracefull
>
> Thanks
>
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
