Error while authenticating using mod_auth_kerb module

Andrew Ortlieb Aortlieb at fimed.com
Fri Aug 3 15:53:40 EDT 2007


I have been facing this same issue for over a week.  It's been entirely
frustrating.

 

While watching network traffic I'm seeing that mod_auth_kerb isn't even
attempting to communicate with the domain controller while attempting to
negotiate. 

 

Here is my error.log:

 

[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1485): [client
192.168.5.171] kerb_authenticate_user entered with user (NULL) and
auth_type Kerberos

[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1172): [client
192.168.5.171] Acquiring creds for HTTP/site-intra.site.local at SITE.LOCAL

[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1316): [client
192.168.5.171] Verifying client data using KRB5 GSS-API

[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1332): [client
192.168.5.171] Verification returned code 589824

[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1359): [client
192.168.5.171] Warning: received token seems to be NTLM, which isn't
supported by the Kerberos module. Check your IE configuration.

 

 

I have verified the communication with kinit and kvno, and confirmed
that the keytab kvno numbers match.

 

Any pointers would be greatly appreciated.

 

-Andy




More information about the Kerberos mailing list