Can't authentice - Kerberos

This is a discussion on Can't authentice - Kerberos ; Hi, I getting strange errors at Apache log file: ---------------------------------------------------------------- src/mod_auth_kerb.c(1324): [client 10.0.10.144] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1324): [client 10.0.10.144] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos [Thu Jul ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Can't authentice

  1. Can't authentice

    Hi,

    I getting strange errors at Apache log file:
    ----------------------------------------------------------------
    src/mod_auth_kerb.c(1324): [client 10.0.10.144] kerb_authenticate_user
    entered with user (NULL) and auth_type Kerberos
    [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1324): [client
    10.0.10.144] kerb_authenticate_user entered with user (NULL) and
    auth_type Kerberos
    [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1026): [client
    10.0.10.144] Acquiring creds for HTTP/store.mebius.lv@TEST.LV
    [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1157): [client
    10.0.10.144] Verifying client data using KRB5 GSS-API
    [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1173): [client
    10.0.10.144] Verification returned code 589824
    [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1199): [client
    10.0.10.144] Warning: received token seems to be NTLM, which isn't
    supported by the Kerberos module. Check your IE configuration.
    [Thu Jul 13 16:37:04 2006] [error] [client 10.0.10.144]
    gss_accept_sec_context() failed: A token was invalid (Token header is
    malformed or corrupt)
    ---------------------------------------------
    Can anyone help? What is wrong?
    Thank you!

    regards,
    Aigars
    ________________________________________________
    Kerberos mailing list Kerberos@mit.edu
    https://mailman.mit.edu/mailman/listinfo/kerberos


  2. Re: Can't authentice


    > Hi,
    > I getting strange errors at Apache log file:
    > ----------------------------------------------------------------
    > src/mod_auth_kerb.c(1324): [client 10.0.10.144] kerb_authenticate_user
    > entered with user (NULL) and auth_type Kerberos
    > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1324): [client
    > 10.0.10.144] kerb_authenticate_user entered with user (NULL) and
    > auth_type Kerberos
    > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1026): [client
    > 10.0.10.144] Acquiring creds for HTTP/store.mebius.lv@TEST.LV
    > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1157): [client
    > 10.0.10.144] Verifying client data using KRB5 GSS-API
    > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1173): [client
    > 10.0.10.144] Verification returned code 589824
    > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1199): [client
    > 10.0.10.144] Warning: received token seems to be NTLM, which isn't
    > supported by the Kerberos module. Check your IE configuration.
    > [Thu Jul 13 16:37:04 2006] [error] [client 10.0.10.144]
    > gss_accept_sec_context() failed: A token was invalid (Token header is
    > malformed or corrupt)
    > ---------------------------------------------
    > Can anyone help? What is wrong?
    > Thank you!


    It's doing what it says: the client is trying NTLM instead of Kerberos.
    Perhaps the client doesn't have tickets for some reason. I've seen this
    before in cases where the client *did* have tickets. It required a patch
    from Microsoft to fix.

    > regards,
    > Aigars
    > ________________________________________________
    > Kerberos mailing list Kerberos@mit.edu

    https://mailman.mit.edu/mailman/listinfo/kerberos


    --
    Richard Silverman
    res@qoxp.net


+ Reply to Thread