I don't know the answer to your problem, but I was wondering if you were aware that the Apache package that comes bundled with Solaris 10 has a Kerberos/SPNEGO authentication module already available called mod_auth_gss and delivered in /usr/apache/libexec.

I blogged about how to use this feature a while ago:
http://blogs.sun.com/roller/page/wyllys?entry=kerberos_web_authentiation_with_apache

-Wyllys



[EMAIL PROTECTED] wrote:

Hi

I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10.
Here is my configuration in httpd.conf

<Location /krb5>
  AuthType Kerberos
  KrbAuthRealms MYDOMAIN.COM
  KrbServiceName HTTP
  Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab
  KrbMethodNegotiate on
  KrbMethodK5Passwd on
  require valid-user
</Location>

but when I view through browser, it is failing and after looking at
errors..
===========
[EMAIL PROTECTED]:/etc/apache> sudo tail -f /var/apache/logs/error_log
[Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default:
fcntl)
[Wed Sep 28 10:05:42 2005] [notice] SIGHUP received.  Attempting to
restart
[Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
mod_perl/1.29 configured -- resuming normal operations
[Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default:
fcntl)
[Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65]
gss_acquire_cred() failed: An invalid name was supplied (No error)
[Wed Sep 28 10:09:46 2005] [notice] SIGHUP received.  Attempting to
restart
[Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
mod_perl/1.29 configured -- resuming normal operations
[Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default:
fcntl)
[Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65]
gss_acquire_cred() failed: An invalid name was supplied (No error)
[Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65]
gss_acquire_cred() failed: An invalid name was supplied (No error)
======================


can you please help me as where I need to look more into.

Regards,
Nikhil

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to