KrbMethodNegotiate ProxyPass

Nicolas Jaunet nicolas.jaunet at gmail.com
Tue Jul 6 05:19:23 EDT 2010


Hello !

So, I try to install sso kerberos on a debian server.
This is my conf of my virtualhost :

<VirtualHost monsite.domain.com>
ServerName monsite.domain.com
<location />
AuthType Kerberos
AuthName "Kerberos Login"
KrbAuthRealms DOMAIN.COM
KrbServiceName HTTP/monsite.domain.com at DOMAIN.COM
Krb5Keytab /etc/apache2/monsite.keytab
KrbMethodNegotiate on
KrbMethodK5Passwd on
KrbVerifyKDC off
KrbSaveCredentials on
require valid-user
</location>
</VirtualHost>

I use proxyreverse to make a connection from another host :

<Location /lien/>
Order allow,deny
allow from all
</Location>
ProxyPass /lien  http://autresite.domain.com:PORT/lien
ProxyPassReverse /lien  http://autresite.domain.com:PORT/lien

The problem must be KrbMethodNegotiate because when I put it "on",
http://monsite.domain.com/lien/ didn't work (401 error), but when I put
"off", it works.
Someone can help me please ?
Thanks and sorry for my english.



More information about the Kerberos mailing list