On Mon, 24 Mar 2014, Massimiliano Perrone (tirasa.net) wrote:
As you can see in the row indicated by the arrow there's:
Entered Krb5Context.initSecContext with state=STATE_NEW
Service ticket not found in the subject
<---------------------------------------------------------------
Is this right?
Hi guys, sorry for the noise...
Maybe this informations can help us to understand the root cause of
our problem.
httpd access_log
192.168.0.176 - HTTP/[email protected]
[24/Mar/2014:12:21:57 +0100] "POST /ipa/json HTTP/1.1" 500 272
httpd error_log
[Mon Mar 24 12:21:57.971182 2014] [:error] [pid 24462] ipa: ERROR:
500 Internal Server Error: jsonserver_kerb.__call__: KRB5CCNAME not
defined in HTTP request environment
Other question/information...
I don't know if I'm saying something wrong but......
Reading [1] at line 980 I noticed that kinit method sets KRB5CCNAME variable
[skip]
Is possible that LoginContext method of Java Kerberos libraries
doesn't do the same thing?
I don't think so. What the code above is not related. KRB5CCNAME is set
by the mod_auth_kerb before handing over request processing to WSGI
module.
--
/ Alexander Bokovoy
_______________________________________________
Freeipa-devel mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-devel
