[24753] in Kerberos
Re: gss_acquire_cred() failed:
daemon@ATHENA.MIT.EDU (Wyllys Ingersoll)
Wed Sep 28 16:07:01 2005
Message-ID: <433AF734.30406@sun.com>
Date: Wed, 28 Sep 2005 16:04:04 -0400
From: Wyllys Ingersoll <wyllys.ingersoll@sun.com>
MIME-Version: 1.0
To: mnikhil@gmail.com
In-Reply-To: <1127882715.552990.97650@g49g2000cwa.googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
I don't know the answer to your problem, but I was wondering if you were
aware that
the Apache package that comes bundled with Solaris 10 has a
Kerberos/SPNEGO authentication
module already available called mod_auth_gss and delivered in
/usr/apache/libexec.
I blogged about how to use this feature a while ago:
http://blogs.sun.com/roller/page/wyllys?entry=kerberos_web_authentiation_with_apache
-Wyllys
mnikhil@gmail.com wrote:
>Hi
>
>I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10.
>Here is my configuration in httpd.conf
>
><Location /krb5>
> AuthType Kerberos
> KrbAuthRealms MYDOMAIN.COM
> KrbServiceName HTTP
> Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab
> KrbMethodNegotiate on
> KrbMethodK5Passwd on
> require valid-user
></Location>
>
>but when I view through browser, it is failing and after looking at
>errors..
>===========
>mulleyn@sx86qa2:/etc/apache> sudo tail -f /var/apache/logs/error_log
>[Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default:
>fcntl)
>[Wed Sep 28 10:05:42 2005] [notice] SIGHUP received. Attempting to
>restart
>[Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
>mod_perl/1.29 configured -- resuming normal operations
>[Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default:
>fcntl)
>[Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65]
>gss_acquire_cred() failed: An invalid name was supplied (No error)
>[Wed Sep 28 10:09:46 2005] [notice] SIGHUP received. Attempting to
>restart
>[Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
>mod_perl/1.29 configured -- resuming normal operations
>[Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default:
>fcntl)
>[Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65]
>gss_acquire_cred() failed: An invalid name was supplied (No error)
>[Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65]
>gss_acquire_cred() failed: An invalid name was supplied (No error)
>======================
>
>
>can you please help me as where I need to look more into.
>
>Regards,
>Nikhil
>
>________________________________________________
>Kerberos mailing list Kerberos@mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
