failed to verify krb5 credentials

[Abbas Attarwala]

Thanks Thomas, for your suggestions.

Yes, I was having problem with my keytab file. My keytab file for some
reason could not be accessed from the .htaccess file.

What I did was, to copy the contents of the .htaccess file and paste them in
the directory attribute of the httpd.conf file of apache. ( and get rid of
.htaccess)

This worked perfectly fine for me and my kerberos authentication works great
with apache!

thanks again!
Abbas Attarwala
Computer Engineering
University of Waterloo
Performance is Temporary, Class is Permanent

On 3/16/06, Thomas A. La Porte <tlaporte at anim.dreamworks.com> wrote:
>
> You need to determine which Kerberos principal Apache is trying
> to lookup, and that will help you troubleshoot the problem.
>
> We've seen this error when using virtual hosts. If you have the
> following service principal in your keytab:
>
> HTTP/www.example.com at EXAMPLE.COM
>
> and you are accessing the following URL:
>
> http://not-www.example.com/
>
> the Kerberos module will attempt to get a service ticket for the
> service principal HTTP/not-www.example.com at EXAMPLE.COM
>
> What we ended up doing was using mod_rewrite so that all of our
> urls mapped into the http://www.example.com/... namespace, and
> then we only had to set up a service principal for
> HTTP/www.example.com, rathern than one for every virtual host.
>
>   -- Tom
>
> Thomas A. La Porte, DreamWorks Animation
> <mailto:tlaporte at anim.dreamworks.com>
>
> On Thu, 16 Mar 2006, abbas.attarwala at gmail.com wrote:
>
> > Hello,
> > I am running the kerberos module with apache 1.3.34 on a ubuntu linux
> > box.
> >
> > When i try to access the website hosted by apache, i get the username
> > and password prompt box, but on entering the correct credentials, the
> > box stays there and keeps on asking for username and password.
> >
> > On checking the error_log file in apache i found this:
> >
> > failed to verify krb5 credentials: Server not found in Kerberos
> > database
> >
> > On entering some wrong username and password this is what i get
> > krb5_get_init_creds_password() failed: Client not found in Kerberos
> > database
> >
> > what am i doing wrong?
> >
> > keytab file? wrong realm?
> >
> > my kinit works fine.
> >
> > ________________________________________________
> > Kerberos mailing list           Kerberos at mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
> >
>



--
Abbas Attarwala
Computer Engineering
University of Waterloo
Performance is Temporary, Class is Permanent