linux authentication kerberos Active Directory

[Schreiber Martin]

Hello List !

This is my first post to your list , pls be a little bit patient.....

Now the problem:

We have a 2 node linux cluster with one VIP to the LAN , configured with the LVS toolset. All works pretty well, but authentication is becomming a horror story. In the test phase I used only one linux node to setup kerberos authentication against AD DomainServer. No problem, but when I startet to implement that approach to the cluster environment show was over.

I googled and googled without any real progress.

My aim is the following:

We have apache running on both clusternodes , authentication is made by mode_auth_kerb module , as I said in a single node environment that works like a charm , but I totally fail to enable kerberos if the cluster is activated. There is to poor documentation on that issue, maybe that wouldnt work anyway.

On the AD I run ktpass.exe as explained in the howtos , I tried to merge the keytabs , but no success at all.

Hope there are some gurus on the list who could lead me the right direction, or can definitely say "that doesnt work"


Best Regards   Martin  Schreiber


Mit freundlichen Grüßen
Martin SCHREIBER

________________________________
Martin SCHREIBER
TÜV AUSTRIA HOLDING AG
Krugerstraße 16
1015 Wien/Österreich
Tel.: +43 (0)1 514 07-6050
Fax: +43 (0)1 514 07-76030
E-Mail: msr at tuv.at<mailto:msr at tuv.at>
RSS-Feed: http://rss.tuv.at/news_de.xml
http://www.tuv.at<http://www.tuv.at/>
________________________________

Sitz: Krugerstraße 16 1015 Wien/Österreich
Vorsitzender des Aufsichtsrates: KR Dipl.-Ing. Johann MARIHART
Vorstand: Dipl.-Ing. Dr. Hugo EBERHARDT (Vorsitzender), Mag. Christoph WENNINGER
Firmenbuchgericht/ -nummer: Wien / FN 286107 x