RE: Authentication

2006-01-13 Thread Hugo Meiland
As fas as I am aware there is no such protocol like Negotiate for proxu authentication defined. Can you tell me the steps for the authentication of a client to a proxy server using the protocol of Kerberos? Just a thought: you might use the apache proxying feature and use the

Re: Problem to have mod_auth_kerb to work

2006-01-13 Thread Markus Moeller
Check the keytab permissions. If apache runs as webuser and the default keytab has only root read permission you will see this error. Markus Smellyfrog [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] OK, it's getting sad. I'm replying to my own posts. ;o) What was wrong was the way

Re: Problem to have mod_auth_kerb to work

2006-01-13 Thread Russ Allbery
Smellyfrog [EMAIL PROTECTED] writes: [Fri Jan 13 12:57:16 2006] [debug] src/mod_auth_kerb.c(1023): [client 172.24.25.100] Acquiring creds for HTTP/[EMAIL PROTECTED] This looks wrong. Normally the instance of the HTTP/* principal must be a fully-qualified hostname. -- Russ Allbery ([EMAIL

Re: Problem to have mod_auth_kerb to work

2006-01-13 Thread Martin v. Löwis
Victor Sudakov wrote: I have read http://modauthkerb.sourceforge.net/configure.html and it is not clear to me: how do you turn off Basic and leave only GSSAPI on? What's unclear about KrbMethodK5Passwd on | off (set to on by default) To enable or disable the use of password based