[31912] in Kerberos
Re: Pending "gss_init_sec_context() failed: Unspecified GSS
daemon@ATHENA.MIT.EDU (Sylvain RICHET)
Wed Jan 13 12:54:52 2010
From: Sylvain RICHET <akamanouche@gmail.com>
Date: Wed, 13 Jan 2010 02:45:35 -0800 (PST)
Message-ID: <06408aba-1c99-4d57-b253-19f221277b0b@a15g2000yqm.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi Douglas,
> Have you tried Wireshark or other analyzer to see what might be going on?
Yes, a lot.
> Do you have a krb5.conf file?
Yes of course, there is a krb5.conf file on client machine.
> Does the web server support GSS? What is the server?
Apache/2.2.12 (Ubuntu), with mod_auth_kerb.
I suppose that, whether Apache2 can plug a kerberos module, then it
supports GSS ?...
> Does the client have user credentials? (klist)
1) The client have the keytab with the entry concerning the targeted
service.
2) The client user has credentials in KDC. On KDC server, kinit
(user) / klist commands show the user.
> Have you posted the problem on modauthkerb-h...@lists.sourceforge.net
> (I expect most of the people are on this list too.)
I subscribed last week, and I have already tried to... but i'm "read-
only" on that list
(how to get POST authorization ? i don't know...)
> Since you built FireFox, what code did it use for the native-gsslib?
> Is it Java?
sorry, I don't understand what you mean because i do not have any
specific idea on how it works.
I just noticed there's an "negotiateauth" to enable... (if not yet
enable in Firefox Ubuntu version !)
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
