Re: Kerberos troubles

2010-09-24 Thread Jean-Yves Avenard
Hi On 22 September 2010 23:37, Greg Hudson wrote: > Apologies that you've had to struggle with this mostly on your own.  I > wish I could offer more assistance. Thanks.. It was a rather painful first encounter with MIT kerberos :) > > Sadly, the major and minor status codes don't provide much i

Re: Kerberos troubles

2010-09-22 Thread Greg Hudson
On Tue, 2010-09-21 at 14:48 -0400, Jean-Yves Avenard wrote: > I have now identified the cause of the issue. > When using mod_auth_kerb with MIT krb5 v1.6.x it works perfectly > with krb5 1.7 and 1.7.1 same. > However, I get this "GSS-API major_status:000d, > minor_status:000186a3" error wheneve

Re: Kerberos troubles

2010-09-21 Thread Jean-Yves Avenard
Please ignore, I thought you were referring to another post of mine. Definitely not the issue between krb5 1.7.1 and 1.8.3 Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Kerberos troubles

2010-09-21 Thread Jean-Yves Avenard
On 22 September 2010 05:28, Christopher D. Clausen wrote: > I'm guessing you need to enable single DES encryption types on the KDCs, the > web server and the clients. > > You should look into the allow_weak_crypto = true in the [libdefaults] > section of krb5.conf Will surely try. The principal

Re: Kerberos troubles

2010-09-21 Thread Christopher D. Clausen
Jean-Yves Avenard wrote: > I have now identified the cause of the issue. > When using mod_auth_kerb with MIT krb5 v1.6.x it works perfectly > with krb5 1.7 and 1.7.1 same. > However, I get this "GSS-API major_status:000d, > minor_status:000186a3" error whenever I use MIT 1.8.x kerberos > libra

Re: Kerberos troubles

2010-09-21 Thread Jean-Yves Avenard
Hi there On 17 September 2010 13:05, Jean-Yves Avenard wrote: > goes on forever, and in the logs I have thousands of > [Fri Sep 17 12:59:45 2010] [info] Subsequent (No.76) HTTPS request > received for child 1 (server svn.domain.com:443) > [Fri Sep 17 12:59:45 2010] [debug] src/mod_auth_kerb.c(16

Re: Kerberos troubles

2010-09-16 Thread Jean-Yves Avenard
Hi Thank you for your answer.. On 17 September 2010 11:45, Greg Hudson wrote: > On Thu, 2010-09-16 at 21:31 -0400, Jean-Yves Avenard wrote: >> I'm having a great deal of trouble getting mod_auth_kerb working on a >> FreeBSD 8.1 box. > > Are you using the system Kerberos library or your own build

Re: Kerberos troubles

2010-09-16 Thread Greg Hudson
On Thu, 2010-09-16 at 21:31 -0400, Jean-Yves Avenard wrote: > I'm having a great deal of trouble getting mod_auth_kerb working on a > FreeBSD 8.1 box. Are you using the system Kerberos library or your own build? If your own build, what version? (The system Kerberos library on FreeBSD is Heimdal,

Kerberos troubles

2010-09-16 Thread Jean-Yves Avenard
Hi there. I'm having a great deal of trouble getting mod_auth_kerb working on a FreeBSD 8.1 box. I've had no issue setting other machines to use kerberos, but not with this one. With no active ticket on the client, as expected I get a 401 error. However, with an active kerberos ticket ; the pag