Problem with SPNEGO on Solaris 10 build 4

Markus Moeller huaraz at moeller.plus.com
Sun Jul 20 11:33:53 EDT 2008


 I tried to use my squid_kerb_auth on Solaris 10 and fail. My configure 
determines it supports SPNEGO but when I use it I get

2008/07/20 16:11:37| squid_kerb_auth: gss_accept_sec_context() failed: No 
credentials were supplied, or the credentials were unavailable or 
inaccessible. No error
BH gss_accept_sec_context() failed: No credentials were supplied, or the 
credentials were unavailable or inaccessible. No error
2008/07/20 16:11:37| squid_kerb_auth: User not authenticated

To test it I did a kinit as a user and run squid_kerb_auth_test which 
creates a base64 encoded token.
./squid_kerb_auth_test testserver.solaris.home
Token: YIICPAYGKwYBBQUCoIICMDCCAiygDTALBg......

I use then the token as input to squid_kerb_auth

./squid_kerb_auth -i -d  <<!
> YIICPAYGKwYBBQUCoIICMDCCAiygDTALBgkqh...
>!

2008/07/20 16:11:36| squid_kerb_auth: Starting version 1.0.1
2008/07/20 16:11:36| squid_kerb_auth: Got 'YR YIICPAYGKwYBBQUCoII.... from 
squid (length: 771).
2008/07/20 16:11:37| squid_kerb_auth: gss_accept_sec_context() failed: No 
credentials were supplied, or the credentials were unavailable or 
inaccessible. No error
BH gss_accept_sec_context() failed: No credentials were supplied, or the 
credentials were unavailable or inaccessible. No error
2008/07/20 16:11:37| squid_kerb_auth: User not authenticated


When I do the same on any other platform (including Opensolaris) it works 
fine. Also when I configure squid_kerb_auth without -DHAVE_SPNEGO it works 
fine e.g. I get:

2008/07/20 16:11:07| squid_kerb_auth: Starting version 1.0.1
2008/07/20 16:11:07| squid_kerb_auth: Got 'YR YIICEQYJKoZIhvcSAQICAQB.... 
from squid (length: 715).
2008/07/20 16:11:07| squid_kerb_auth: parseNegTokenInit failed with rc=102
2008/07/20 16:11:07| squid_kerb_auth: Token is possibly a GSSAPI token
AF AA== markus at SOLARIS.HOME
2008/07/20 16:11:07| squid_kerb_auth: AF AA== markus at SOLARIS.HOME
2008/07/20 16:11:07| squid_kerb_auth: User markus at SOLARIS.HOME authenticated


Is this a know problem with Solaris 10 or must I specify the right mechanism 
?


Thank you
Markus





More information about the Kerberos mailing list