You can subscribe to this list. If you're allowed in, then it works. If the LDAP check blocks you, then it works fine in Firefox on CentOS and MacOS. ('Works fine' means you get a 401 Authorization Required error.) With Safari 3 on MacOS 10.4.11 it seems to be an infinite loop. Anyone else run into anything like this?

Feb 6, 2017 - Generating a 'keytab' file for the Apache Host using the ktpass.exe tool. The ktpass command. Apt-get install libapache2-mod-auth-kerb.

Does it work with IE? I suppose I'll need to debug this a bit. How to videos from hotstar in pc youtube.

Probably need Apple to fix something. *bleah* ------------------------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. Henry.B.Hotz@., or hbhotz@. The below error was caused by a bad configuration of mod_auth_kerb, not a Heimdal bug. Sorry about the noise. Doesn't explain the problem with mod_spnego, but it's not generic to Heimdal. On Nov 12, 2007, at 6:17 PM, Henry B.

Hotz wrote: > Hmmm. Looks like I just hit something similar with mod_auth_kerb > and Heimdal 1.0.1 on Solaris 9, Apache 2.2. > >> [Mon Nov 12 18:] [info] Initial (No.1) HTTPS request >> received for child 1 (server redhotz.jpl.nasa.gov:443) >> [Mon Nov 12 18:] [debug] src/mod_auth_kerb.c(1572): >> [client 137.78.61.96] kerb_authenticate_user entered with user >> (NULL) and auth_type Kerberos >> [Mon Nov 12 18:] [debug] src/mod_auth_kerb.c(1194): >> [client 137.78.61.96] Acquiring creds for HTTP@. >> [Mon Nov 12 18:] [debug] src/mod_auth_kerb.c(1338): >> [client 137.78.61.96] Verifying client data using KRB5 GSS-API >> [Mon Nov 12 18:] [debug] src/mod_auth_kerb.c(1354): >> [client 137.78.61.96] Verification returned code 1 >> [Mon Nov 12 18:] [debug] src/mod_auth_kerb.c(1372): >> [client 137.78.61.96] GSS-API token of length 22 bytes will be >> sent back >> [Mon Nov 12 18:] [error] [client 137.78.61.96] >> gss_display_name() failed: An invalid name was supplied (unknown >> mech-code 0 for mech unknown) > > Have to look into this some more. > > On Nov 11, 2007, at 10:27 AM, Markus Moeller wrote: > >> Changing mod_spnego so that it returns data to the client when >> continuation >> is required I see the following reply showing heimdals(1.0.1) >> authentication reply (w.g. Authentication is incomplete and the only >> supported mechanism is NTLM). On Nov 15, 2007, at 5:40 AM, Berkes Alexander wrote: > Hello, I am trying to configure apache to do sso (single sign on) > against our Windows kerberos.

> > I installed apache and installed the mod_auth_kerb version from =20 > ubuntu (libapach2-mod-auth-kerb). > > Everything works fine if I try to authenticate as a user without =20 > german-umlauts in the username.

There is intent to make everything UTF-8, but that's not yet the =20 case. If you want guaranteed interoperability among Kerberos =20 implementations then you should stick to ASCII. (I think this has =20 nothing to do with Apache, or even mod_auth_kerb.) > When I try to authenticate as a user who das german umlauts in =20 > username I get an error. > On the linux side i get 'user unknown'. > > When I look at the windows logs I can see that f.e. For the user =20 > M=FCller > the '=FC' just vanishes. Like I would like to authenticate the user =20= > Mller > > After googling a while and reading a lot of howtos and rfcs I found =20= > out, > that kerberos doesn't like latin1 characters.