Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Kerberos works on command line, not through apache

Status
Not open for further replies.

bbbaldie

Technical User
Feb 7, 2003
4
US
On a private intranet, I have Kerberos authentication working flawlessly at the command line of a CentOS4 server. However, apache2 seems totally unaware of it. Here's a snip from httpd.conf:

Code:
LoadModule auth_kerb_module modules/mod_auth_kerb.so

and here's an .htaccess file on a protected directory:

Code:
AuthName "Kerberos Login"
AuthType KerberosV5
Krb5Keytab /var/[URL unfurl="true"]www/auth_kerb.keytab[/URL]
KrbAuthRealm MYDOMAIN.COM
KrbMethodNegotiate on
KrbMethodK5Passwd on
KrbSaveCredentials off
KrbVerifyKDC off
Require user MYDOMAIN\myusername

I get served up a 401 page, never a challenge for a username/password.

No error log notes, this from access.log:

Code:
10.30.150.60 - - [04/Jun/2010:08:08:04 -0500] "GET /test HTTP/1.1" 401 472 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.3) Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3 GTB7.0"

It appears to me that apache is unaware of kerberos, even though the module successfully loads.

Any idea what to try next?
 
I'm loading mod_auth_ntlm_winbind.so, could that cause problems with using Kerberos?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top