And what is the results of a "klist tickets" and "klist tgt" on the end-user 
workstation where Internet Explorer is
running ?

Arnaud Lesueur

Le Ven 27 octobre 2006 13:39, [EMAIL PROTECTED] a écrit :
>

>>
>> If your browser is sending an NTLM token and if you have a valid kerberos
>> ticket granting ticket (krbtgt) in your session this means that : - your web 
>> browser is not properly configured
>> - or the service principal name of your server is not configured in Active
>> Directory
>>
>>
>
>
> ktpass.exe /out caskerberos.keytab /princ HTTP/[EMAIL PROTECTED] /pass 
> password /mapuser
> KEYPHRENE\caskerberos ptype krb5_nt_principal /crypto DES-CBC-MD5
>
>
> [EMAIL PROTECTED] Vincent]# klist
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: [EMAIL PROTECTED]
>
>
> Valid starting     Expires            Service principal
> 11/26/06 15:14:36  11/27/06 01:14:28  krbtgt/[EMAIL PROTECTED]
> renew until 11/27/06 15:14:36
>
>
> Kerberos 4 ticket cache: /tmp/tkt0
> klist: You have no tickets cached
>
>
> My service principal name is configured properly and I have added in Local
> Intranet this url https://cas.keyphrene.com/ in my browser and I have
> clicked Enable Integrated Windows Authentication (requires restart) in 
> advanced options.
>
> Thanks for your help
> Vincent Jaulin
>
>
>
>
> _______________________________________________
> Yale CAS mailing list
> [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
>
>
>


_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to