gss_acquire_cred() failed: - Kerberos

This is a discussion on gss_acquire_cred() failed: - Kerberos ; Hi I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10. Here is my configuration in httpd.conf AuthType Kerberos KrbAuthRealms MYDOMAIN.COM KrbServiceName HTTP Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab KrbMethodNegotiate on KrbMethodK5Passwd on require valid-user but when I view through browser, it is failing ...

+ Reply to Thread
Results 1 to 6 of 6

Thread: gss_acquire_cred() failed:

  1. gss_acquire_cred() failed:

    Hi

    I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10.
    Here is my configuration in httpd.conf


    AuthType Kerberos
    KrbAuthRealms MYDOMAIN.COM
    KrbServiceName HTTP
    Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab
    KrbMethodNegotiate on
    KrbMethodK5Passwd on
    require valid-user


    but when I view through browser, it is failing and after looking at
    errors..
    ===========
    mulleyn@sx86qa2:/etc/apache> sudo tail -f /var/apache/logs/error_log
    [Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default:
    fcntl)
    [Wed Sep 28 10:05:42 2005] [notice] SIGHUP received. Attempting to
    restart
    [Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    mod_perl/1.29 configured -- resuming normal operations
    [Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default:
    fcntl)
    [Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65]
    gss_acquire_cred() failed: An invalid name was supplied (No error)
    [Wed Sep 28 10:09:46 2005] [notice] SIGHUP received. Attempting to
    restart
    [Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    mod_perl/1.29 configured -- resuming normal operations
    [Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default:
    fcntl)
    [Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65]
    gss_acquire_cred() failed: An invalid name was supplied (No error)
    [Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65]
    gss_acquire_cred() failed: An invalid name was supplied (No error)
    ======================


    can you please help me as where I need to look more into.

    Regards,
    Nikhil


  2. Re: gss_acquire_cred() failed:

    can anybody please answer this..

    On 27 Sep 2005 21:45:15 -0700, mnikhil@gmail.com wrote:
    >
    > Hi
    >
    > I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10.
    > Here is my configuration in httpd.conf
    >
    >
    > AuthType Kerberos
    > KrbAuthRealms MYDOMAIN.COM
    > KrbServiceName HTTP
    > Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab
    > KrbMethodNegotiate on
    > KrbMethodK5Passwd on
    > require valid-user
    >

    >
    > but when I view through browser, it is failing and after looking at
    > errors..
    > ===========
    > mulleyn@sx86qa2:/etc/apache> sudo tail -f /var/apache/logs/error_log
    > [Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default:
    > fcntl)
    > [Wed Sep 28 10:05:42 2005] [notice] SIGHUP received. Attempting to
    > restart
    > [Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    > mod_perl/1.29 configured -- resuming normal operations
    > [Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default:
    > fcntl)
    > [Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65
    > ]
    > gss_acquire_cred() failed: An invalid name was supplied (No error)
    > [Wed Sep 28 10:09:46 2005] [notice] SIGHUP received. Attempting to
    > restart
    > [Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    > mod_perl/1.29 configured -- resuming normal operations
    > [Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default:
    > fcntl)
    > [Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65
    > ]
    > gss_acquire_cred() failed: An invalid name was supplied (No error)
    > [Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65
    > ]
    > gss_acquire_cred() failed: An invalid name was supplied (No error)
    > ======================
    >
    >
    > can you please help me as where I need to look more into.
    >
    > Regards,
    > Nikhil
    >
    > ________________________________________________
    > Kerberos mailing list Kerberos@mit.edu
    > https://mailman.mit.edu/mailman/listinfo/kerberos
    >




    --
    Nikhil

    Google is Great !
    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


  3. Re: gss_acquire_cred() failed:

    can some one please respond..

    Regards,
    Nikhil

    On 27 Sep 2005 21:45:15 -0700, mnikhil@gmail.com wrote:
    >
    > Hi
    >
    > I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10.
    > Here is my configuration in httpd.conf
    >
    >
    > AuthType Kerberos
    > KrbAuthRealms MYDOMAIN.COM
    > KrbServiceName HTTP
    > Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab
    > KrbMethodNegotiate on
    > KrbMethodK5Passwd on
    > require valid-user
    >

    >
    > but when I view through browser, it is failing and after looking at
    > errors..
    > ===========
    > mulleyn@sx86qa2:/etc/apache> sudo tail -f /var/apache/logs/error_log
    > [Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default:
    > fcntl)
    > [Wed Sep 28 10:05:42 2005] [notice] SIGHUP received. Attempting to
    > restart
    > [Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    > mod_perl/1.29 configured -- resuming normal operations
    > [Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default:
    > fcntl)
    > [Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65
    > ]
    > gss_acquire_cred() failed: An invalid name was supplied (No error)
    > [Wed Sep 28 10:09:46 2005] [notice] SIGHUP received. Attempting to
    > restart
    > [Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    > mod_perl/1.29 configured -- resuming normal operations
    > [Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default:
    > fcntl)
    > [Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65
    > ]
    > gss_acquire_cred() failed: An invalid name was supplied (No error)
    > [Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65
    > ]
    > gss_acquire_cred() failed: An invalid name was supplied (No error)
    > ======================
    >
    >
    > can you please help me as where I need to look more into.
    >
    > Regards,
    > Nikhil
    >
    > ________________________________________________
    > Kerberos mailing list Kerberos@mit.edu
    > https://mailman.mit.edu/mailman/listinfo/kerberos
    >




    --
    Nikhil

    Google is Great !
    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


  4. Re: gss_acquire_cred() failed:



    On Wednesday, September 28, 2005 05:38:14 PM +0530 Nikhil Mulley
    wrote:

    > can some one please respond..


    This is a mailing list, not an IRC chat room.
    You sent your initial message at 9:45 PM Pacific time, which is after
    midnight on the US east coast, and early morning in Europe. None of the
    experts were awake.

    Your next message came a few hours later, still in the middle of the night.

    Your third message came a couple of hours after that.



    It is entirely unreasonable to expect that in the space of a few hours,
    overnight, someone who recognizes your problem will read and respond. It's
    also unreasonable, in my opinion, to ever repeatedly ask the same question
    or ask "someone please respond" on a public mailing list. If someone had
    read your message who knew the answer to your question, they would have
    responded.


    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


  5. Re: gss_acquire_cred() failed:


    I don't know the answer to your problem, but I was wondering if you were
    aware that
    the Apache package that comes bundled with Solaris 10 has a
    Kerberos/SPNEGO authentication
    module already available called mod_auth_gss and delivered in
    /usr/apache/libexec.

    I blogged about how to use this feature a while ago:
    http://blogs.sun.com/roller/page/wyl...on_with_apache

    -Wyllys



    mnikhil@gmail.com wrote:

    >Hi
    >
    >I am running mod_auth_kerb (Apache(1.3.33 module) on an x86 Solaris-10.
    >Here is my configuration in httpd.conf
    >
    >
    > AuthType Kerberos
    > KrbAuthRealms MYDOMAIN.COM
    > KrbServiceName HTTP
    > Krb5Keytab /etc/apache/http_sx86qa2.krb5keytab
    > KrbMethodNegotiate on
    > KrbMethodK5Passwd on
    > require valid-user
    >

    >
    >but when I view through browser, it is failing and after looking at
    >errors..
    >===========
    >mulleyn@sx86qa2:/etc/apache> sudo tail -f /var/apache/logs/error_log
    >[Wed Sep 28 10:01:29 2005] [notice] Accept mutex: fcntl (Default:
    >fcntl)
    >[Wed Sep 28 10:05:42 2005] [notice] SIGHUP received. Attempting to
    >restart
    >[Wed Sep 28 10:05:43 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    >mod_perl/1.29 configured -- resuming normal operations
    >[Wed Sep 28 10:05:43 2005] [notice] Accept mutex: fcntl (Default:
    >fcntl)
    >[Wed Sep 28 10:06:24 2005] [error] [client 149.77.165.65]
    >gss_acquire_cred() failed: An invalid name was supplied (No error)
    >[Wed Sep 28 10:09:46 2005] [notice] SIGHUP received. Attempting to
    >restart
    >[Wed Sep 28 10:09:47 2005] [notice] Apache/1.3.33 (Unix) PHP/4.3.10
    >mod_perl/1.29 configured -- resuming normal operations
    >[Wed Sep 28 10:09:47 2005] [notice] Accept mutex: fcntl (Default:
    >fcntl)
    >[Wed Sep 28 10:09:56 2005] [error] [client 149.77.165.65]
    >gss_acquire_cred() failed: An invalid name was supplied (No error)
    >[Wed Sep 28 10:09:57 2005] [error] [client 149.77.165.65]
    >gss_acquire_cred() failed: An invalid name was supplied (No error)
    >======================
    >
    >
    >can you please help me as where I need to look more into.
    >
    >Regards,
    >Nikhil
    >
    >________________________________________________
    >Kerberos mailing list Kerberos@mit.edu
    >https://mailman.mit.edu/mailman/listinfo/kerberos
    >
    >


    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


  6. Re: gss_acquire_cred() failed:

    I humbly acknowledge what you said and apologize for the same..


    On 9/28/05, Jeffrey Hutzelman wrote:
    >
    >
    >
    > On Wednesday, September 28, 2005 05:38:14 PM +0530 Nikhil Mulley
    > wrote:
    >
    > > can some one please respond..

    >
    > This is a mailing list, not an IRC chat room.
    > You sent your initial message at 9:45 PM Pacific time, which is after
    > midnight on the US east coast, and early morning in Europe. None of the
    > experts were awake.
    >
    > Your next message came a few hours later, still in the middle of the
    > night.
    >
    > Your third message came a couple of hours after that.
    >
    >
    >
    > It is entirely unreasonable to expect that in the space of a few hours,
    > overnight, someone who recognizes your problem will read and respond. It's
    > also unreasonable, in my opinion, to ever repeatedly ask the same question
    > or ask "someone please respond" on a public mailing list. If someone had
    > read your message who knew the answer to your question, they would have
    > responded.
    >
    >
    >



    --
    Nikhil

    Google is Great !
    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


+ Reply to Thread