Can't authentice

[Richard E. Silverman]

> Hi,
> I getting strange errors at Apache log file:
> ----------------------------------------------------------------
> src/mod_auth_kerb.c(1324): [client 10.0.10.144] kerb_authenticate_user
> entered with user (NULL) and auth_type Kerberos
> [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1324): [client
> 10.0.10.144] kerb_authenticate_user entered with user (NULL) and
> auth_type Kerberos
> [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1026): [client
> 10.0.10.144] Acquiring creds for HTTP/store.mebius.lv at TEST.LV
> [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1157): [client
> 10.0.10.144] Verifying client data using KRB5 GSS-API
> [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1173): [client
> 10.0.10.144] Verification returned code 589824
> [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1199): [client
> 10.0.10.144] Warning: received token seems to be NTLM, which isn't
> supported by the Kerberos module. Check your IE configuration.
> [Thu Jul 13 16:37:04 2006] [error] [client 10.0.10.144]
> gss_accept_sec_context() failed: A token was invalid (Token header is
> malformed or corrupt)
> ---------------------------------------------
> Can anyone help? What is wrong?
> Thank you!

It's doing what it says: the client is trying NTLM instead of Kerberos.
Perhaps the client doesn't have tickets for some reason.  I've seen this
before in cases where the client *did* have tickets.  It required a patch
from Microsoft to fix.

> regards,
> Aigars
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


-- 
  Richard Silverman
  res at qoxp.net