[32462] in Kerberos
Re: gss_acquire_cred() failed
daemon@ATHENA.MIT.EDU (Vlad)
Mon Jun 14 16:01:57 2010
From: Vlad <vladistan@gmail.com>
Date: Mon, 14 Jun 2010 10:43:02 -0700 (PDT)
Message-ID: <0771b318-9c6b-4066-a6ab-ecd0e03edf84@k39g2000yqd.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Nicolas,
The reason you are getting this message is because the mod_auth_kerb
could not find the entry that matches your server name in the keytab,
you have to set it using KrbServiceName directive like this:
KrbServiceName HTTP/domain..@DOMAIN.FR
Vlad
On Jun 14, 5:04 am, Nicolas Jaunet <nicolas.jau...@gmail.com> wrote:
> Hi !
>
> I installed mod_auth_kerb on my debian server and create a keytab to
> authenticate thanks to kerberos on a web site with apache tomcat.
> I created a user in my kdc.
> To check I did that :
>
> debian-server# klist -k krb5.keytab
> Keytab name: FILE:krb5.keytab
> KVNO Principal
> ----
> --------------------------------------------------------------------------
> 3 HTTP/domain...@DOMAIN.FR
>
> And the file /etc/apache2/kerberos.conf :
>
> AuthType Kerberos
> AuthName "Kerberos Login"
> KrbMethodNegotiate on
> KrbVerifyKDC off
> KrbMethodK5Passwd off
> KrbAuthRealms DOMAIN.FR
> Krb5KeyTab /etc/apache2/krb5.keytab
> require valid-user
>
> When I try to connect my web site withhttp://domain.fr
> I have a 500 Internal Server Error and the error.log file show me this error
> :
>
> gss_acquire_cred() failed: Unspecified GSS failure. Minor code may provide
> more information (No principal in keytab matches desired name)
>
> Someone can help me ?
> Thanks.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
