failed to verify krb5 credentials

Thomas A. La Porte tlaporte at
Thu Mar 16 16:51:06 EST 2006

You need to determine which Kerberos principal Apache is trying 
to lookup, and that will help you troubleshoot the problem.

We've seen this error when using virtual hosts. If you have the 
following service principal in your keytab:


and you are accessing the following URL:

the Kerberos module will attempt to get a service ticket for the 
service principal HTTP/ at EXAMPLE.COM

What we ended up doing was using mod_rewrite so that all of our 
urls mapped into the namespace, and 
then we only had to set up a service principal for 
HTTP/, rathern than one for every virtual host.

  -- Tom

Thomas A. La Porte, DreamWorks Animation
<mailto:tlaporte at>

On Thu, 16 Mar 2006, abbas.attarwala at wrote:

> Hello,
> I am running the kerberos module with apache 1.3.34 on a ubuntu linux
> box.
> When i try to access the website hosted by apache, i get the username
> and password prompt box, but on entering the correct credentials, the
> box stays there and keeps on asking for username and password.
> On checking the error_log file in apache i found this:
> failed to verify krb5 credentials: Server not found in Kerberos
> database
> On entering some wrong username and password this is what i get
> krb5_get_init_creds_password() failed: Client not found in Kerberos
> database
> what am i doing wrong?
> keytab file? wrong realm?
> my kinit works fine.
> ________________________________________________
> Kerberos mailing list           Kerberos at

More information about the Kerberos mailing list