Linux/Apache - combine mod_auth_kerb and ldap - to be or not to be???

[Dax Kelson]

On Mon, 2009-04-06 at 11:47 -0700, kerbie_newbie wrote:

> As far as I can tell, when using mod_auth_kerb and selecting kerberos as the
> authtype it is pretty much Kerberos or nothing ... is this correct? I can
> see no way to intercept the failure.

This not correct. What you want are these two directives:

KrbMethodNegotiate On
KrbMethodK5Passwd On

The second directive gives you fallback to interactive password
prompting if the user doesn't have a valid TGT.

Dax Kelson
Guru Labs