I followed http://freeipa.org/page/Apache_SNI_With_Kerberos to enable login
in to a webserver with kerberos tickets. I followed everything to the
letter and all looks well.
I can log in with a username and password, but when I set the httpd.conf
I can't log in. What works great with the ipa admin interface does not work
with this recipe.
I even compared it to /etc/httpd/conf.d/ipa.conf and added the
KrbAuthRealms setting but to no avail.
Adding KrbConstrainedDelegation on does not work alas. Although I am
using centos 6.3
I checked the http logfiles and the /var/log/krb5kdc.log, everything else
on that host works fine. I can log in without a password and sudo -s works
like it should.
Please help me debugging this issue. What am I missing?
Freeipa-users mailing list