failed to verify krb5 credentials

[Thomas A. La Porte]

You need to determine which Kerberos principal Apache is trying 
to lookup, and that will help you troubleshoot the problem.

We've seen this error when using virtual hosts. If you have the 
following service principal in your keytab:

HTTP/www.example.com at EXAMPLE.COM

and you are accessing the following URL:

http://not-www.example.com/

the Kerberos module will attempt to get a service ticket for the 
service principal HTTP/not-www.example.com at EXAMPLE.COM

What we ended up doing was using mod_rewrite so that all of our 
urls mapped into the http://www.example.com/... namespace, and 
then we only had to set up a service principal for 
HTTP/www.example.com, rathern than one for every virtual host.

  -- Tom

Thomas A. La Porte, DreamWorks Animation
<mailto:tlaporte at anim.dreamworks.com>

On Thu, 16 Mar 2006, abbas.attarwala at gmail.com wrote:

> Hello,
> I am running the kerberos module with apache 1.3.34 on a ubuntu linux
> box.
>
> When i try to access the website hosted by apache, i get the username
> and password prompt box, but on entering the correct credentials, the
> box stays there and keeps on asking for username and password.
>
> On checking the error_log file in apache i found this:
>
> failed to verify krb5 credentials: Server not found in Kerberos
> database
>
> On entering some wrong username and password this is what i get
> krb5_get_init_creds_password() failed: Client not found in Kerberos
> database
>
> what am i doing wrong?
>
> keytab file? wrong realm?
>
> my kinit works fine.
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>