failed to verify krb5 credentials

abbas.attarwala@gmail.com abbas.attarwala at gmail.com
Fri Mar 17 20:37:53 EST 2006


I really need SPNEGO Kerberos authentication with mod_auth_kerb.

I have followed the excellent tutorial on how to set this at
http://www.grolmsnet.de/kerbtut/

but still, the HTTP header file has

WWW-Authenticate negotiate
WWW-Authenticate Basic realm="Kerberos Login"

and asks the user to enter his username and password.

my httpd.conf file is:

LoadModule	auth_kerb_module	/usr/lib/apache/1.3/mod_auth_kerb.so
<Directory "/var/www">
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate off
KrbAuthoritative on
KrbVerifyKDC off
KrbAuthRealm MYDOMAIN.COM
Krb5Keytab /etc/apache/apache.keypad
KrbSaveCredentials off
require valid-user
</Directory>

I believe I need to set:
KrbMethodNegotiate on
KrbMethodK5Passwd off

and place my webserver in the intranet zone in IE.

Please let me know, so that when i go to work tomorrow i can implement
these changes. 
thanks.




More information about the Kerberos mailing list