Error while authenticating using mod_auth_kerb module

Gopalan, Sriram sgopalan at
Wed May 9 15:22:53 EDT 2007


Make sure you have everything setup as per this doc.

Also download kerbtray. Its part of Windows 2000 Resource Kit. It will
give you an idea of the ticket status.

Post the results back, I can help you on this. We just completed rolling
out a site with Linux-Apache-mod_auth_kerb-AD for a userbase of 6000+.


-----Original Message-----
From: kerberos-bounces at [mailto:kerberos-bounces at] On
Behalf Of vijay_jain at
Sent: Wednesday, May 09, 2007 8:57 AM
To: kerberos at
Subject: Error while authenticating using mod_auth_kerb module

Hi All,

I am using mod_auth_kerb module on Apache web server to authenitcate
user based on the Windows login. 

The token based authentication is not sucessful and am getting
"authorization required" message after providing credentials through
pop-up three times.
Basically teh issue is with the token povied by IE. It is NTLM instead
of kerberos token.

I googled on net and found the the issue is with IE settings.
I followed the *resolutions* mentioned at the following link

i.e enabling IWA through browser.
Adding site to intranet list
Disabling proxies

But still not able to get Kerberos token from IE

Following is the message in Apache log
Warning: received token seems to be NTLM, which isn't supported by the
Kerberos module. Check your IE configuration.

Can someone help me resolve the issue?


This e-mail may contain privileged and confidential information which is
the property of Persistent Systems Pvt. Ltd. It is intended only for the
use of the individual or entity to which it is addressed. If you are not
the intended recipient, you are not authorized to read, retain, copy,
print, distribute or use this message. If you have received this
communication in error, please notify the sender and delete all copies
of this message. Persistent Systems Pvt. Ltd. does not accept any
liability for virus infected mails.
Kerberos mailing list           Kerberos at

More information about the Kerberos mailing list