I have been facing this same issue for over a week. It's been entirely frustrating.
While watching network traffic I'm seeing that mod_auth_kerb isn't even attempting to communicate with the domain controller while attempting to negotiate. Here is my error.log: [Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1485): [client 192.168.5.171] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos [Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1172): [client 192.168.5.171] Acquiring creds for HTTP/[EMAIL PROTECTED] [Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1316): [client 192.168.5.171] Verifying client data using KRB5 GSS-API [Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1332): [client 192.168.5.171] Verification returned code 589824 [Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1359): [client 192.168.5.171] Warning: received token seems to be NTLM, which isn't supported by the Kerberos module. Check your IE configuration. I have verified the communication with kinit and kvno, and confirmed that the keytab kvno numbers match. Any pointers would be greatly appreciated. -Andy ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
