apache - Mod_auth_kerb: Warning: received token seems to be NTLM, possible issues? -


i'm trying set mod_auth_kerb debian/apache , windows2008 active directory. works:

kinit -k -t /etc/krb5.keytab http/myhost.domain.local see valid ticket in klist, service principal krbtgt/myhost.mydomain.local@mydomain.local 

this in apache error log:

[sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1628): [client 10.50.109.64] kerb_authenticate_user entered user (null) , auth_type kerberos [sun mar 24 16:41:11 2013] [debug] mod_deflate.c(615): [client 10.50.109.64] zlib: compressed 528 355 : url /private/auth.php [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1628): [client 10.50.109.64] kerb_authenticate_user entered user (null) , auth_type kerberos [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1240): [client 10.50.109.64] acquiring creds http@myhost [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1385): [client 10.50.109.64] verifying client data using krb5 gss-api [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1401): [client 10.50.109.64] client didn't delegate credential [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1429): [client 10.50.109.64] warning: received token seems ntlm, isn't supported kerberos module. check ie configuration. [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1101): [client 10.50.109.64] gss-api major_status:00090000, minor_status:00000000 [sun mar 24 16:41:11 2013] [error] [client 10.50.109.64] gss_accept_sec_context() failed: invalid token supplied (, no error) 

if activate fallback basic auth , enter credentials, works fine. checked ie settings, registry settings, tried firefox or safari, keep giving same issue. feel i've been on , on dozens of tutorials , configuration changes, can't seem find needle.

is error message misleading or missing?


Comments

Popular posts from this blog

php - Wordpress website dashboard page or post editor content is not showing but front end data is showing properly -

How to get the ip address of VM and use it to configure SSH connection dynamically in Ansible -

javascript - Get parameter of GET request -