I've set up an Apache 2.4 server with mod _auth_gssapi and mod_waklog. To test I created a simple script in cgi-bin to run klist -f and tokens then echo KRB5CCNAME. cgi-bin is protected with a .htaccess file that does the GSSAPI/Kerberos authentication. WaklogAFSCell is defined and WaklogEnabled and WaklogUseUserTokens are set to On.
Running the script shows that I'm not getting a token. Ticket cache: FILE:/var/run/httpd/htcacheclean/u...@my.school.edu Default principal: u...@my.school.edu Valid starting Expires Service principal 12/14/23 15:23:21 01/13/24 15:23:21 krbtgt/my.school....@my.school.edu Flags: FfT Tokens held by the Cache Manager: --End of list-- “KRB5CCNAME=FILE:/var/run/httpd/htcacheclean/u...@my.school.edu” I set LogLevel to debug and can see entries for mod_waklog and phase calls. Can anyone offer any suggestions, tips, advice to help me troubleshoot? Any and all advice would be greatly appreciated. -- -------------------------------------------------------- David R. Barstis Center for Research Computing University of Notre Dame Notre Dame, IN 46556 (574) 631-8575 --------------------------------------------------------
