Re: acquiring creds for different principal ??

2005-10-01 Thread Nikhil Mulley
Exactly, I did the same.. but the errors still persists..I will today try and let you know what about this.. Thanks, Nikhil On 10/1/05, Markus Moeller [EMAIL PROTECTED] wrote: In your krb5 config you use sx86qa2.hyd.de.com http://sx86qa2.hyd.de.com = DE.COM http://DE.COM but the server wants

acquiring creds for different principal ??

2005-09-30 Thread mnikhil
Hi I am running Apache(2.0.52) on Sol-10 (x86). and am using mod_auth_kerb for kerberos authentication.. I have correctly generated the keytab file for the host following the details at http://www.grolmsnet.de/kerbtut/. but at seeing the logs, it shows me that Apache/mod_auth_kerb is getting

Re: acquiring creds for different principal ??

2005-09-30 Thread vj
By default the last part of hte host domain name in caps will be taken as your realm. how about this one : [libdefaults] default_realm = DE.COM [realms] DE.COM = { kdc = dchyd1.hyd.de.com admin_server = dchyd1.hyd.de.com } [domain_realm]

Re: acquiring creds for different principal ??

2005-09-30 Thread mnikhil
from the command line : [EMAIL PROTECTED]:/etc/apache2 kinit Password for [EMAIL PROTECTED]: [EMAIL PROTECTED]:/etc/apache2 It functions well, but I still the same in my Apache error log.. [Fri Sep 30 20:31:52 2005] [error] [client 149.77.165.65] gss_acquire_cred() failed: Miscellaneous failure

Re: acquiring creds for different principal ??

2005-09-30 Thread Markus Moeller
In your krb5 config you use sx86qa2.hyd.de.com = DE.COM but the server wants deshaw.com not de.com ! HTTP/[EMAIL PROTECTED] You need an entry for hyd.deshaw.com in your config file or change your hostname to hyd.de.com. Also which key is in your keytab ? Can you do a kinit -k -t