Pending "gss_init_sec_context() failed: Unspecified GSS failure...."

[Russ Allbery]

Sylvain RICHET <akamanouche at gmail.com> writes:

> Thanks, Russ !
> Your opinion concerning my logs leads me a little.
> Probably it is a problem on the Kerberos client (that is: Firefox/
> NegotiateAuth/GSS-API lib).
> That's why the KDC does not log any GSSAPI request (SPNEGO request)
> But i didn't find any workaround...

Some things to double-check:  Are the Kerberos libraries installed on the
client?  If the client is a Linux system, are the Kerberos development
libraries installed on the client?  (At least some builds of Firefox on
some Linux distributions have tried to load the *.so name instead of the
full library name, which doesn't exist unless the development package is
installed.)  Are you certain Firefox is built with Negotiate-Auth GSSAPI
support on the client?

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>