Problem to have mod_auth_kerb to work

Fri Jan 13 05:18:54 EST 2006

Hi Achim,

Following are the headers of the request and reply to and from the
webserver.

Request from IE to the webserver:

GET /iViewXT/login.do HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-ie
Host: gtci2736vm
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Connection: Keep-Alive

Reply:

HTTP/1.0 401 Authorization Required
Date: Fri, 13 Jan 2006 09:50:14 GMT
Server: Apache/2.0.53-dev (Unix)
WWW-Authenticate: Negotiate
WWW-Authenticate: Basic realm="Kerberos Login"
Content-Length: 599
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>401 Authorization Required</title>
</head><body>
<h1>Authorization Required</h1>
<p>This server could not verify that you
are authorized to access the document
requested.  Either you supplied the wrong
credentials (e.g., bad password), or your
browser doesn't understand how to supply
the credentials required.</p>
<p>Additionally, a 403 Forbidden
error was encountered while trying to use an ErrorDocument to handle
the request.</p>
<hr>
<address>Apache/2.0.53-dev (Unix) Server at gtci2736vm Port
443</address>
</body></html>

I hadn't seen that Kerberos Events were not trapped, so I'm going to
check that out. It seems that IE is actually not requesting the HTTP
ticket from the KDC. So hopefully the event viewer will show why.

Thanks for your previous quick response.
I'll keep this thread updated with my progress.
Yannick