[28187] in Kerberos
Error while authenticating using mod_auth_kerb module
daemon@ATHENA.MIT.EDU (Andrew Ortlieb)
Fri Aug 3 17:03:27 2007
MIME-Version: 1.0
Content-class: urn:content-classes:message
Date: Fri, 3 Aug 2007 14:53:40 -0500
Message-ID: <66242A4D7831BC43AB71C0B251DD764BB66846@fimed-mail.FI-MED.local>
From: "Andrew Ortlieb" <Aortlieb@fimed.com>
To: <kerberos@mit.edu>
X-SA-Exim-Mail-From: Aortlieb@fimed.com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I have been facing this same issue for over a week. It's been entirely
frustrating.
While watching network traffic I'm seeing that mod_auth_kerb isn't even
attempting to communicate with the domain controller while attempting to
negotiate.
Here is my error.log:
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1485): [client
192.168.5.171] kerb_authenticate_user entered with user (NULL) and
auth_type Kerberos
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1172): [client
192.168.5.171] Acquiring creds for HTTP/site-intra.site.local@SITE.LOCAL
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1316): [client
192.168.5.171] Verifying client data using KRB5 GSS-API
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1332): [client
192.168.5.171] Verification returned code 589824
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1359): [client
192.168.5.171] Warning: received token seems to be NTLM, which isn't
supported by the Kerberos module. Check your IE configuration.
I have verified the communication with kinit and kvno, and confirmed
that the keytab kvno numbers match.
Any pointers would be greatly appreciated.
-Andy
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
