[28114] in Kerberos
Re: [modauthkerb] Negotiate on Windows with cross-realm
daemon@ATHENA.MIT.EDU (Achim Grolms)
Thu Jul 26 14:41:24 2007
From: Achim Grolms <achim@grolmsnet.de>
To: mikkel@linet.dk
Date: Thu, 26 Jul 2007 19:47:00 +0200
In-Reply-To: <46A8DCD5.9010706@anl.gov>
MIME-Version: 1.0
Content-Disposition: inline
Message-Id: <200707261947.02667.achim@grolmsnet.de>
Cc: "Douglas E. Engert" <deengert@anl.gov>,
modauthkerb-help@lists.sourceforge.net, kerberos@mit.edu
Reply-To: achim@grolmsnet.de
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thursday 26 July 2007 19:41, Douglas E. Engert wrote:
> Mikkel Kruse Johnsen wrote:
> > Hi Douglas
> >
> > I have already done all these steps.
>
> It still looks like the client is not delegating.
I am not sure if this idea works
but maybe you (Mikkel) can give it a try?
>From my point of view that means we can exclude the item
"Client sends nothing as delegated credeatials" because from
my point of view the logging means *something* is received.
My next idea is:
to add more logging information to mod_auth_kerb
gss_inquire_cred
(RFC 2744, sect. 5.21.)
can be used to make the logging having a closer look to
the delegated credential 'delegated_cred'.
This can be used to write name, lifetime, cred_usage and mechanisms
to logfile.
Achim
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
