Hi Kronus
You definitely have to use mod_auth_kerb's internal SPNEGO to get it to
work. I spent a lot of time realizing that.
the ok_as_delegate flag is not in kerberos, but it is a very simple
patch. See attacthment.
Med Venlig Hilsen / Kind Regards
Mikkel Kruse
Johnsen
Adm.Dir.
Linet
A correction: ok_as_delegate kadmin support will be in MIT krb5 1.7,
contrary to what I wrote previously.
On Tue, 2009-05-19 at 08:55 +0200, Mikkel Kruse Johnsen wrote:
Hi Kronus
You definitely have to use mod_auth_kerb's internal SPNEGO to get it
to work. I spent a lot of time realizing
Hi all,
I'm trying to use the following setup (everything on Linux):
server: Apache2 + mod_auth_kerb + MIT KDC
klient: Firefox with properly configured MIT Kerberos support for the local
server
User has a kerberos ticket in its cache and is able to access protected webpage
using firefox
kadmin support for ok_as_delegate has been added on the trunk but is not
currently scheduled to go into 1.7, as the cutoff for new features was a
while ago. That could probably change if we find conclusive evidence
that ok_as_delegate support is more important than we thought.
However, I think
