Error while authenticating using mod_auth_kerb module
Andrew Ortlieb
Aortlieb at fimed.com
Fri Aug 3 15:53:40 EDT 2007
I have been facing this same issue for over a week. It's been entirely
frustrating.
While watching network traffic I'm seeing that mod_auth_kerb isn't even
attempting to communicate with the domain controller while attempting to
negotiate.
Here is my error.log:
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1485): [client
192.168.5.171] kerb_authenticate_user entered with user (NULL) and
auth_type Kerberos
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1172): [client
192.168.5.171] Acquiring creds for HTTP/site-intra.site.local at SITE.LOCAL
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1316): [client
192.168.5.171] Verifying client data using KRB5 GSS-API
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1332): [client
192.168.5.171] Verification returned code 589824
[Fri Aug 03 14:43:06 2007] [debug] src/mod_auth_kerb.c(1359): [client
192.168.5.171] Warning: received token seems to be NTLM, which isn't
supported by the Kerberos module. Check your IE configuration.
I have verified the communication with kinit and kvno, and confirmed
that the keytab kvno numbers match.
Any pointers would be greatly appreciated.
-Andy
More information about the Kerberos
mailing list