[24939] in Kerberos
Re: kerberos service (httpd using mod_auth_kerb) in DMZ
daemon@ATHENA.MIT.EDU (Thomas A. La Porte)
Mon Nov 14 14:52:40 2005
Date: Mon, 14 Nov 2005 11:51:57 -0800 (PST)
From: "Thomas A. La Porte" <tlaporte@anim.dreamworks.com>
To: Mailing List Kerberos <kerberos@mit.edu>
In-Reply-To: <4378E8FC.1010105@lexum.umontreal.ca>
Message-ID: <Pine.LNX.4.63.0511141148330.21001@buoy.anim.dreamworks.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Errors-To: kerberos-bounces@mit.edu
On Mon, 14 Nov 2005, FM wrote:
> Thanks for the reply,
>
> We're using Linux
> browser is Firefox
> KDC : MIT Kerberos 1.3
> you can use http if you add tu http conf : KrbServiceName "http"
> thank you for the ML Link !
>
>
> Achim Grolms wrote:
>
>> On Monday 14 November 2005 18:48, FM wrote:
>>
>>
>>> I'm trying to use mod_auth_kerb to authenticate users with kerberos.
>>
>> Have you read <http://www.grolmsnet.de/kerbtut/>?
>>
>>
>>> But when I try to authenticat myself http error_log show :
>>> [error] [client 192.168.4.171] krb5_verify_init_creds() failed: Key
>>> table entry not found
The "Key table entry not found" is an indication that the client
is requesting a principal name which is not listed in the keytab
file. You can snoop the network with tcpdump or ethereal, or
trace the httpd process in order to determine what principal name
your client is requesting.
-- Tom
Thomas A. La Porte, DreamWorks SKG
<mailto:tlaporte@anim.dreamworks.com>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
