Error while authenticating using mod_auth_kerb module

Jeffrey Altman jaltman at secure-endpoints.com
Fri Aug 3 17:20:38 EDT 2007


Andrew Ortlieb wrote:
> I have been facing this same issue for over a week.  It's been entirely
> frustrating.
>
>  
>
> While watching network traffic I'm seeing that mod_auth_kerb isn't even
> attempting to communicate with the domain controller while attempting to
> negotiate. 
In a kerberos authentication, the service does not communicate with the
KDC.  The service
already knows its private key necessary to decrypt the blob given by the
KDC to the client
for delivery to the service.

Even the client will not communicate with the KDC if it already has a
valid service ticket for
the service it is attempting to authenticate to.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20070803/6c816772/attachment.bin


More information about the Kerberos mailing list