failed to verify krb5 credentials
abbas.attarwala@gmail.com
abbas.attarwala at gmail.com
Fri Mar 17 20:37:53 EST 2006
I really need SPNEGO Kerberos authentication with mod_auth_kerb.
I have followed the excellent tutorial on how to set this at
http://www.grolmsnet.de/kerbtut/
but still, the HTTP header file has
WWW-Authenticate negotiate
WWW-Authenticate Basic realm="Kerberos Login"
and asks the user to enter his username and password.
my httpd.conf file is:
LoadModule auth_kerb_module /usr/lib/apache/1.3/mod_auth_kerb.so
<Directory "/var/www">
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate off
KrbAuthoritative on
KrbVerifyKDC off
KrbAuthRealm MYDOMAIN.COM
Krb5Keytab /etc/apache/apache.keypad
KrbSaveCredentials off
require valid-user
</Directory>
I believe I need to set:
KrbMethodNegotiate on
KrbMethodK5Passwd off
and place my webserver in the intranet zone in IE.
Please let me know, so that when i go to work tomorrow i can implement
these changes.
thanks.
More information about the Kerberos
mailing list