[
https://issues.apache.org/jira/browse/HTTPCLIENT-934?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12864767#action_12864767
]
Dennis Rieks commented on HTTPCLIENT-934:
-----------------------------------------
Hi,
i have installed a kerberos server on my private server. Same problem here. You
can test it with this krb5.conf file:
-----------------------------------------------------
[libdefaults]
default_realm = BLAO.DE
[realms]
BLAO.DE = {
kdc = blao.de
admin_server = blao.de
}
[domain_realm]
.blao.de = BLAO.DE
blao.de = BLAO.DE
-----------------------------------------------------
There are 3 users:
[email protected] passwd test1
[email protected] passwd test2
[email protected] passwd test3
Try this url: http://blao.de/krb5/user.php (or https for firefox also works)
On Linux, using kinit [email protected] the authentication works for firefox and
curl.
But httpclient gives me "WARNUNG: Authentication error: Negotiate authorization
challenge expected, but not found"
Can you reproduce this?
Dennis
> kerberos auth not working
> -------------------------
>
> Key: HTTPCLIENT-934
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-934
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: Examples, HttpClient
> Affects Versions: 4.1 Alpha1
> Reporter: Dennis Rieks
> Priority: Minor
>
> Hi,
> i used org/apache/http/examples/client/ClientKerberosAuthentication.java to
> test kerberos authentication.
> My Setup:
> Apache2 on Debian (virtual machine "server4.kdctest.local") is setup to
> deliver kerberos authenticated content via http and https.
> The Kerberos kdc (virtual maschine "kdc.kdctest.local") also runs on debian.
> On my Desktop (ubuntu) i can use kinit/klist/kdestory to sign in on the
> kerberos domain and server4 only delivers content when signed on.
> I used firefox (with extra settings for http in about:config) and curl (curl
> -k --negotiate -u : http://server4.kdctest.local/test.php) to test my
> kerberos setup.
> The Problem:
> ClientKerberosAuthentication always asks the username/password and dont care
> about kinit. Also there is always an http 401 error and no content is
> deliverd.
> I used the latest svn version of httpclient
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
