Hi,
Sylvain RICHET-5 wrote:
>
> Any help would be deeply appreciated.
> Thanks in advance
>
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
I had the same problem/error and fixed it by a
OK Russ,
That's why in need to launch a kinit command, before Firefox,
in order to get a local ticket cache.
Without cache, as i mentionned in my first pot, NegotiateAuth log
displays :
[...]
-1217141024[b742e1c0]: gss_init_sec_context() failed: Unspecified GSS
failure. Minor code may provide mo
Sylvain RICHET writes:
> VERY relevant question !
> It becomes clear that, with a Linux Client, something has to glue
> (just like it is in w2k environment, at the session init, in
> interaction with the domain controler)
> On linux client, this *something* is precisely : kinit !
> So, i have la
> The client should *not* have the keytab, the web server has to have
> the keytab with an HTTP/fqdn.of.ser...@realm principal.
yes, on my Apache2 (with mod_aut_kerb enabled), there is a keytab
with an entry for the requested service (HTTP/fqdn...)
>> 2) The client user has credentials in KDC. On
Sylvain RICHET wrote:
> Hi Douglas,
>
>> Have you tried Wireshark or other analyzer to see what might be going on?
> Yes, a lot.
>
>> Do you have a krb5.conf file?
> Yes of course, there is a krb5.conf file on client machine.
>
>> Does the web server support GSS? What is the server?
> Ap
Hi Douglas,
> Have you tried Wireshark or other analyzer to see what might be going on?
Yes, a lot.
> Do you have a krb5.conf file?
Yes of course, there is a krb5.conf file on client machine.
> Does the web server support GSS? What is the server?
Apache/2.2.12 (Ubuntu), with mod_auth_kerb.
Sylvain RICHET wrote:
> On 11 jan, 21:47, Phil Pishioneri wrote:
>> On 1/11/10 12:40 PM, Russ Allbery wrote:
>>
>>> That page doesn't discuss how to configure Firefox to find the GSS-API
>>> library on UNIX at run-time, ...
>> Firefox config preference is named "network.negotiate-auth.gsslib".
>
On 12 jan, 09:42, Sylvain RICHET wrote:
> On 11 jan, 21:47, Phil Pishioneri wrote:
>
> > On 1/11/10 12:40 PM, Russ Allbery wrote:
>
> > > That page doesn't discuss how to configure Firefox to find the GSS-API
> > > library on UNIX at run-time, ...
>
> > Firefox config preference is named "network
On 11 jan, 21:47, Phil Pishioneri wrote:
> On 1/11/10 12:40 PM, Russ Allbery wrote:
>
> > That page doesn't discuss how to configure Firefox to find the GSS-API
> > library on UNIX at run-time, ...
>
> Firefox config preference is named "network.negotiate-auth.gsslib".
>
> -Phil
Hi Phil,
Indeed,
On 1/11/10 12:40 PM, Russ Allbery wrote:
> That page doesn't discuss how to configure Firefox to find the GSS-API
> library on UNIX at run-time, ...
Firefox config preference is named "network.negotiate-auth.gsslib".
-Phil
Kerberos mailing list
Sylvain RICHET writes:
> According to [https://developer.mozilla.org/En/
> Integrated_Authentication], if i well understand, Firefox doesn't
> need to be rebuilt for NegotiateAuth support.
> NegotiateAuth has just to be configured with network.nego* directives
> (in about:config).
That page doe
On 8 jan, 22:28, Russ Allbery wrote:
> Sylvain RICHET writes:
> > Thanks, Russ !
> > Your opinion concerning my logs leads me a little.
> > Probably it is a problem on the Kerberos client (that is: Firefox/
> > NegotiateAuth/GSS-API lib).
> > That's why the KDC does not log any GSSAPI request (SP
Sylvain RICHET writes:
> Thanks, Russ !
> Your opinion concerning my logs leads me a little.
> Probably it is a problem on the Kerberos client (that is: Firefox/
> NegotiateAuth/GSS-API lib).
> That's why the KDC does not log any GSSAPI request (SPNEGO request)
> But i didn't find any workaround.
On 7 jan, 20:25, Russ Allbery wrote:
> Sylvain RICHET writes:
> > I really don't succeed to solve this error message ! Seems to be a GSS
> > API ? A communication problem between NegotiateAuth (pluggued in
> > Firefox) dans the underlying GSS API library (libgssapi-krb5-2 ?) ?
> > The authentic
Sylvain RICHET writes:
> I really don't succeed to solve this error message ! Seems to be a GSS
> API ? A communication problem between NegotiateAuth (pluggued in
> Firefox) dans the underlying GSS API library (libgssapi-krb5-2 ?) ?
> The authentication process succeeds (as configured in "mod_
I really don't succeed to solve this error message !
Seems to be a GSS API ?
A communication problem between NegotiateAuth (pluggued in Firefox)
dans the underlying GSS API library (libgssapi-krb5-2 ?) ?
The authentication process succeeds (as configured in "mod_auth_kerb")
but...
1) the
Any help would be deeply appreciated.
Thanks in advance
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
17 matches
Mail list logo
