I don't know the answer to your problem, but I was wondering if you were aware that the Apache package that comes bundled with Solaris 10 has a Kerberos/SPNEGO authentication module already available called mod_auth_gss and delivered in /usr/apache/libexec.
I blogged about how to use this feature a while ago: http://blogs.sun.com/roller/page/wyllys?entry=kerberos_web_authentiation_with_apache -Wyllys [EMAIL PROTECTED] wrote:
Hi I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10. Here is my configuration in httpd.conf <Location /krb5> AuthType Kerberos KrbAuthRealms MYDOMAIN.COM KrbServiceName HTTP Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab KrbMethodNegotiate on KrbMethodK5Passwd on require valid-user </Location> but when I view through browser, it is failing and after looking at errors.. =========== [EMAIL PROTECTED]:/etc/apache> sudo tail -f /var/apache/logs/error_log [Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default: fcntl) [Wed Sep 28 10:05:42 2005] [notice] SIGHUP received. Attempting to restart [Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10 mod_perl/1.29 configured -- resuming normal operations [Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default: fcntl) [Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65] gss_acquire_cred() failed: An invalid name was supplied (No error) [Wed Sep 28 10:09:46 2005] [notice] SIGHUP received. Attempting to restart [Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10 mod_perl/1.29 configured -- resuming normal operations [Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default: fcntl) [Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65] gss_acquire_cred() failed: An invalid name was supplied (No error) [Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65] gss_acquire_cred() failed: An invalid name was supplied (No error) ====================== can you please help me as where I need to look more into. Regards, Nikhil ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos