[32460] in Kerberos

home help back first fref pref prev next nref lref last post

gss_acquire_cred() failed

daemon@ATHENA.MIT.EDU (Nicolas Jaunet)
Mon Jun 14 05:04:26 2010

MIME-Version: 1.0
Date: Mon, 14 Jun 2010 11:04:19 +0200
Message-ID: <AANLkTikV3R0bsHRbNyHUouAeXtcD88HS0HOPrZxm585X@mail.gmail.com>
From: Nicolas Jaunet <nicolas.jaunet@gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi !

I installed mod_auth_kerb on my debian server and create a keytab to
authenticate thanks to kerberos on a web site with apache tomcat.
I created a user in my kdc.
To check I did that :

debian-server# klist -k krb5.keytab
Keytab name: FILE:krb5.keytab
KVNO Principal
----
--------------------------------------------------------------------------
   3 HTTP/domain.fr@DOMAIN.FR


And the file /etc/apache2/kerberos.conf :

AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate on
KrbVerifyKDC off
KrbMethodK5Passwd off
KrbAuthRealms DOMAIN.FR
Krb5KeyTab /etc/apache2/krb5.keytab
require valid-user


When I try to connect my web site with http://domain.fr
I have a 500 Internal Server Error and the error.log file show me this error
:

gss_acquire_cred() failed: Unspecified GSS failure.  Minor code may provide
more information (No principal in keytab matches desired name)

Someone can help me ?
Thanks.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post