Re: [modauthkerb] Negotiate on Windows with cross-realm trust AD and MIT Kereros.

2007-07-23 Thread Mikkel Kruse Johnsen
Hi Douglas Setting: ksetup /SetRealmFlag CBS.DK Delegate did not work. Still no KRB5CCNAME in apache. I have recompiled krb5-1.5 (RHEL5) with a patch to make it possible to set the ok-as-delegate flag. I then set the flag on HTTP/[EMAIL PROTECTED] and windows kerbtray shows Ok as delegate

Re: [modauthkerb] Negotiate on Windows with cross-realm trust AD and MIT Kereros.

2007-07-23 Thread Douglas E. Engert
Mikkel Kruse Johnsen wrote: Hi Douglas Setting: ksetup /SetRealmFlag CBS.DK Delegate did not work. Still no KRB5CCNAME in apache. I have recompiled krb5-1.5 (RHEL5) with a patch to make it possible to set the ok-as-delegate flag. I then set the flag on HTTP/[EMAIL PROTECTED]

Re: [modauthkerb] Negotiate on Windows with cross-realm trust AD and MIT Kereros.

2007-07-18 Thread Achim Grolms
On Wednesday 18 July 2007 10:01, Mikkel Kruse Johnsen wrote: Now I only have the problem that mod_auth_kerb don't write my credentials to KRB5CCNAME (in PHP). Some knowledge on Credentials delegation I have stolen from mailinglists is now part of

Re: [modauthkerb] Negotiate on Windows with cross-realm trust AD and MIT Kereros.

2007-07-18 Thread Stephen Frost
* Mikkel Kruse Johnsen ([EMAIL PROTECTED]) wrote: Now I only have the problem that mod_auth_kerb don't write my credentials to KRB5CCNAME (in PHP). My kerbtray under windows says it is Forwardable but no Ok to delegate, So I guess that is the problem. Under linux they are forwardable.

Re: [modauthkerb] Negotiate on Windows with cross-realm trust AD and MIT Kereros.

2007-07-18 Thread Mikkel Kruse Johnsen
Hi The problem is that my HTTP/[EMAIL PROTECTED] is made on the MIT kerberos server and not the AD. So I have to set the ok-as-delegate on the MIT server, but according to Stehpen that is not possible: Question: I found how to set ok-as-delegate for heimdal how is this done for MIT kerberos ?

Re: [modauthkerb] Negotiate on Windows with cross-realm trust AD and MIT Kereros.

2007-07-18 Thread Douglas E. Engert
Stephen Frost wrote: * Mikkel Kruse Johnsen ([EMAIL PROTECTED]) wrote: Now I only have the problem that mod_auth_kerb don't write my credentials to KRB5CCNAME (in PHP). My kerbtray under windows says it is Forwardable but no Ok to delegate, So I guess that is the problem. Have a look at