gss_acquire_cred() failed:

[Wyllys Ingersoll]

I don't know the answer to your problem, but I was wondering if you were 
aware that
the Apache package that comes bundled with Solaris 10 has a 
Kerberos/SPNEGO authentication
module already available called mod_auth_gss and delivered in 
/usr/apache/libexec.

I blogged about how to use this feature a while ago:
http://blogs.sun.com/roller/page/wyllys?entry=kerberos_web_authentiation_with_apache

-Wyllys



mnikhil at gmail.com wrote:

>Hi
>
>I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10.
>Here is my configuration in httpd.conf
>
><Location /krb5>
>   AuthType Kerberos
>   KrbAuthRealms MYDOMAIN.COM
>   KrbServiceName HTTP
>   Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab
>   KrbMethodNegotiate on
>   KrbMethodK5Passwd on
>   require valid-user
></Location>
>
>but when I view through browser, it is failing and after looking at
>errors..
>===========
>mulleyn at sx86qa2:/etc/apache> sudo tail -f /var/apache/logs/error_log
>[Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default:
>fcntl)
>[Wed Sep 28 10:05:42 2005] [notice] SIGHUP received.  Attempting to
>restart
>[Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
>mod_perl/1.29 configured -- resuming normal operations
>[Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default:
>fcntl)
>[Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65]
>gss_acquire_cred() failed: An invalid name was supplied (No error)
>[Wed Sep 28 10:09:46 2005] [notice] SIGHUP received.  Attempting to
>restart
>[Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
>mod_perl/1.29 configured -- resuming normal operations
>[Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default:
>fcntl)
>[Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65]
>gss_acquire_cred() failed: An invalid name was supplied (No error)
>[Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65]
>gss_acquire_cred() failed: An invalid name was supplied (No error)
>======================
>
>
>can you please help me as where I need to look more into.
>
>Regards,
>Nikhil
>
>________________________________________________
>Kerberos mailing list           Kerberos at mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>  
>