apache - Mod_auth_kerb: Warning: received token seems to be NTLM, possible issues? -
i'm trying set mod_auth_kerb debian/apache
, windows2008
active directory. works:
kinit -k -t /etc/krb5.keytab http/myhost.domain.local see valid ticket in klist, service principal krbtgt/myhost.mydomain.local@mydomain.local
this in apache error log:
[sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1628): [client 10.50.109.64] kerb_authenticate_user entered user (null) , auth_type kerberos [sun mar 24 16:41:11 2013] [debug] mod_deflate.c(615): [client 10.50.109.64] zlib: compressed 528 355 : url /private/auth.php [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1628): [client 10.50.109.64] kerb_authenticate_user entered user (null) , auth_type kerberos [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1240): [client 10.50.109.64] acquiring creds http@myhost [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1385): [client 10.50.109.64] verifying client data using krb5 gss-api [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1401): [client 10.50.109.64] client didn't delegate credential [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1429): [client 10.50.109.64] warning: received token seems ntlm, isn't supported kerberos module. check ie configuration. [sun mar 24 16:41:11 2013] [debug] src/mod_auth_kerb.c(1101): [client 10.50.109.64] gss-api major_status:00090000, minor_status:00000000 [sun mar 24 16:41:11 2013] [error] [client 10.50.109.64] gss_accept_sec_context() failed: invalid token supplied (, no error)
if activate fallback basic auth , enter credentials, works fine. checked ie settings, registry settings, tried firefox or safari, keep giving same issue. feel i've been on , on dozens of tutorials , configuration changes, can't seem find needle.
is error message misleading or missing?
Comments
Post a Comment