[29123] in Kerberos
Re: gss_accept_sec_context fails intermittently
daemon@ATHENA.MIT.EDU (Edward Murrell)
Tue Jan 22 00:46:10 2008
From: Edward Murrell <edward@murrell.co.nz>
To: kerberos@mit.edu
In-Reply-To: <438C0227-9D24-4FCE-BCEA-D25845D219A5@maf.org>
Date: Tue, 22 Jan 2008 18:45:13 +1300
Message-Id: <1200980713.6033.5.camel@fusion>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
No to try and rain on your parade but...
Wouldn't it be easier to use the standard mod_auth_kerb lib and write an
apple only directory service apache module (if it doesn't already
exist), and set up the auth kerb as non-authoritative?
Cheers
Edward
On Mon, 2008-01-21 at 10:55 -0700, Nathan Mellis wrote:
> Greetings!
>
> I am writing a module for Apache that does Kerberos authentication as
> well as providing Basic authentication as a fallback and authorization
> via Apple's Directory Services. I have followed both Apple's sample
> code and the code from mod_auth_kerb and think I've got my mind
> wrapped around the whole process. I am running into a problem though
> where gss_accept_sec_context will sometimes return properly and let
> everything go through. Other times it will return with a major error
> of "851968" (Unexpected error) and a minor error of "0" (No error).
> Needless to say, this has me somewhat stumped. Does anyone know where
> else I can look to see what exactly it is not liking on the times that
> it fails?
>
> Thanks in advance!
>
> Nathan Mellis
> Application Developer
> Mission Aviation Fellowship
> nmellis@maf.org
>
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
