> Hi, > I getting strange errors at Apache log file: > ---------------------------------------------------------------- > src/mod_auth_kerb.c(1324): [client 10.0.10.144] kerb_authenticate_user > entered with user (NULL) and auth_type Kerberos > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1324): [client > 10.0.10.144] kerb_authenticate_user entered with user (NULL) and > auth_type Kerberos > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1026): [client > 10.0.10.144] Acquiring creds for HTTP/[EMAIL PROTECTED] > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1157): [client > 10.0.10.144] Verifying client data using KRB5 GSS-API > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1173): [client > 10.0.10.144] Verification returned code 589824 > [Thu Jul 13 16:37:04 2006] [debug] src/mod_auth_kerb.c(1199): [client > 10.0.10.144] Warning: received token seems to be NTLM, which isn't > supported by the Kerberos module. Check your IE configuration. > [Thu Jul 13 16:37:04 2006] [error] [client 10.0.10.144] > gss_accept_sec_context() failed: A token was invalid (Token header is > malformed or corrupt) > --------------------------------------------- > Can anyone help? What is wrong? > Thank you!
It's doing what it says: the client is trying NTLM instead of Kerberos. Perhaps the client doesn't have tickets for some reason. I've seen this before in cases where the client *did* have tickets. It required a patch from Microsoft to fix. > regards, > Aigars > ________________________________________________ > Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos -- Richard Silverman [EMAIL PROTECTED] ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
