>
> If your browser is sending an NTLM token and if you have a valid kerberos
> ticket granting ticket (krbtgt) in your
> session this means that :
> - your web browser is not properly configured
> - or the service principal name of your server is not configured in Active
> Directory
>


ktpass.exe /out caskerberos.keytab /princ
HTTP/[EMAIL PROTECTED] /pass password /mapuser
KEYPHRENE\caskerberos ptype krb5_nt_principal /crypto DES-CBC-MD5

[EMAIL PROTECTED] Vincent]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting     Expires            Service principal
11/26/06 15:14:36  11/27/06 01:14:28  krbtgt/[EMAIL PROTECTED]
        renew until 11/27/06 15:14:36


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

My service principal name is configured properly and I have added in Local
Intranet this url https://cas.keyphrene.com/ in my browser and I have
clicked Enable Integrated Windows Authentication (requires restart) in
advanced options.

Thanks for your help
Vincent Jaulin



_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to