[Pkg-team] [OpenIndiana Distribution - Bug #1827] mod_auth_gss
devnull at illumos.org
Sat Dec 3 00:10:28 UTC 2011
Issue #1827 has been updated by Ryo Murakawa.
Assignee changed from Ryo Murakawa to OI PKG
Tags changed from needs-triage to mod_auth_gss
This problem is related to the library related to the package.
Bug #1827: mod_auth_gss
Author: Stefano Germini
Assignee: OI PKG
Target version: oi_151_stable
I'm getting problems running apache22 with mod_auth_gss enabled on oi_151a.
Same configuration with latest version of OpenSolaris was fine.
* Active Directory 2008sp2 with multiple DCs;
* krb5.conf OK (i can use kinit to get tickets AND *generated keytabs on a DC are OK when used with glassfish with spnego auth*);
* httpd.conf OK (same configuration on OpenSolaris was OK);
* resolv.conf & nsswitch.conf OK.
When browsing the server with IE, the kerberos ticket cache on my host (windows 7) contains tickect for the service principal I generated, so I think it's all ok, but I get an error page:
This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.""
and apache server logs on error_log:
[Tue Nov 29 12:33:49 2011] [error] [client 10.10.17.9] gss_accept_sec_context() failed: Invalid token was supplied (Unknown error)
Is this a bug? mmmmmm
Note: i can even join AD with CIFS, so I think krb5.conf is really ok!
PS: excuse me for my poor english!
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://www.illumos.org/my/account
More information about the Pkg-team