[33606] in Kerberos
error "Wrong principal in request"
daemon@ATHENA.MIT.EDU (Rusanov, Dmitry)
Thu Jul 21 01:27:29 2011
From: "Rusanov, Dmitry" <dmitry.rusanov@hp.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Thu, 21 Jul 2011 06:25:33 +0100
Message-ID: <23EA97DB9A87114BAA819A23EBF1DB447BB2B92365@GVW1121EXC.americas.hpqcorp.net>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
Can someone help me to troubleshoot this error in apache log:
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(994): [client 192.168.20.17] Using HTTP/itgc-merc.msk.mts.ru@MSK.MTS.RU as server principal for password verification
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(698): [client 192.168.20.17] Trying to get TGT for user makh@MSK.MTS.RU
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(609): [client 192.168.20.17] Trying to verify authenticity of KDC using principal HTTP/itgc-merc.msk.mts.ru@MSK.MTS.RU
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(652): [client 192.168.20.17] krb5_rd_req() failed when verifying KDC
[Mon Jul 11 10:27:18 2011] [error] [client 192.168.20.17] failed to verify krb5 credentials: Wrong principal in request
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(698): [client 192.168.20.17] Trying to get TGT for user makh@MTS.RU
[Mon Jul 11 10:27:18 2011] [error] [client 192.168.20.17] krb5_get_init_creds_password() failed: Realm not local to KDC
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(1073): [client 192.168.20.17] kerb_authenticate_user_krb5pwd ret=401 user=(NULL) authtype=(NULL)
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(1628): [client 192.168.20.17] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
[Mon Jul 11 10:27:18 2011] [debug] src/mod_auth_kerb.c(1566): [client 192.168.20.17] matched previous auth request
It is SSO with apache+kerberos
Best regards,
Dmitry
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
