Using kerberos ticket on web browsers

Diego Lima diego-lima at prodesan.com.br
Wed Dec 6 11:33:20 EST 2006


On Wed, 6 Dec 2006 16:22:27 -0000, Tim Alsop wrote
> What URL are you using when you request access to the web site ? 

I can reach the website through its IP address or its DNS name (estagiario6).
So I can access both using http://192.168.130.222 or http://estagiario6. I
don't think it's a server configuration issue since it properly athenticates
the linux workstations with the same tickets. I was checking apache's error
logs and this is the error I get when I try to log from a windows workstation:


[Mon Nov 06 14:16:11 2006] [error] [client 192.168.130.224]
gss_accept_sec_context() failed: A token was invalid (Token header is
malformed or corrupt)


I have also taken a look and noticed that both IE and Firefox try to
authenticate using the very same packets, so I'm wondering if my firefox is
using MIT's gsslib at all. Is it the one that is installed with Kerberos for
Windows or do I have to install it from somewhere else?

Thanks,

--
Diego Alencar Alves de Lima
DINF - Prodesan (http://www.prodesan.com.br)
Prefeitura Municipal de Santos (http://www.santos.sp.gov.br)


-- 
Esta mensagem foi verificada pelo sistema de antivírus e
 acredita-se estar livre de perigo.




More information about the Kerberos mailing list