James James <jre...@gmail.com> writes:

> my /etc/webkdc/webkdc.conf look like this :

> # The KEYRING_PATH should match what you put in your httpd config
> $KEYRING_PATH = "/etc/httpd/conf/webkdc/keyring";
> $URL = "https://webkdc.example.com/webkdc-service/";;

Normally, this should be https://localhost/webkdc-service/.  Do you really
want to run the WebKDC on a different host than the WebLogin service?  If
so, you'll need to configure the SSL certificate used by Perl LWP.  You
can do that by setting $ENV{PERL_LWP_SSL_CA_FILE} in the configuration
file to the path to the CA certificate used by the WebKDC.  But usually
it's easier to just use localhost here, which is already special-cased.

-- 
Russ Allbery <ea...@windlord.stanford.edu>
Technical Lead, ITS Infrastructure Delivery Group, Stanford University

Reply via email to