Best unofficial Apache Server developers community
Username
Forgot password?
Sign in with Twitter account
Sign in with Facebook account

Kerberos working on the command line, not via apache


I have Kerberos authentication working flawlessly at tyhe command line of a CentOS4 server. However, apache2 seems totally unaware of it. Here's a snip0 from httpd.conf:

Code:

LoadModule auth_kerb_module modules/mod_auth_kerb.so
and here's an .htaccess file on a protected directory:

Code:

AuthName "Kerberos Login"
AuthType KerberosV5
Krb5Keytab /var/www/auth_kerb.keytab
KrbAuthRealm MYDOMAIN.COM
KrbMethodNegotiate on
KrbMethodK5Passwd on
KrbSaveCredentials off
KrbVerifyKDC off
Require user MYDOMAIN\myusername

I get served up a 401 page, never a challenge for a username/password.

No error log notes, this from access.log:

Code:

10.30.150.60 - - [04/Jun/2010:08:08:04 -0500] "GET /test HTTP/1.1" 401 472 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.3) Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3 GTB7.0"
It appears to me that apache is unaware of kerberos, even though the module successfully loads.

Any idea what to try next?
View Original Thread
Comments
0
Be the first to comment

Join with account you already have


Sign in with Twitter account
Sign in with Facebook account
Sign in with Google Friend Connect
avatar
Tags: code, kerberos, 401
Commented: (PIG-1495) Add -q command line option to set queue name for Pig jobs from command line
Jul 14, 2010
[ https://issues.apache.org/jira/browse/PIG-1495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12888452#action_12888452 ] Olga Natkovich commented on PIG-1495:

Commented: (PIG-1495) Add -q command line option to set queue name for Pig jobs from command line
Jul 14, 2010
[ https://issues.apache.org/jira/browse/PIG-1495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12888279#action_12888279 ] Hadoop QA commented on PIG-1495:

Resolved: (PIG-1495) Add -q command line option to set queue name for Pig jobs from command line
Jul 26, 2010
[ https://issues.apache.org/jira/browse/PIG-1495?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Olga Natkovich resolved PIG-1495.

Updated: (DIRSERVER-1107) [kerberos]org.apache.directory.server.kerberos.shared.crypto.encryption.DesCbcCrcEncryption shall not use java.util.zip.CRC3
May 26, 2010
[ https://issues.apache.org/jira/browse/DIRSERVER-1107?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny updated DIRSERVER-1107:

Updated: (DIRSERVER-1107) [kerberos]org.apache.directory.server.kerberos.shared.crypto.encryption.DesCbcCrcEncryption shall not use java.util.zip.CRC3
May 31, 2010
[ https://issues.apache.org/jira/browse/DIRSERVER-1107?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kiran Ayyagari updated DIRSERVER-1107:

DO NOT REPLY New: Apache silently fails if ServerRoot is given in the command line but not in the config file
Aug 10, 2010
https://issues.apache.org/bugzilla/show_bug.cgi?id=49738 Summary: Apache silently fails if ServerRoot is given in the command line but not in the config file Product: Apache httpd-2 Version:…

Commented: (HTTPCLIENT-934) kerberos auth not working
Aug 21, 2010
[ https://issues.apache.org/jira/browse/HTTPCLIENT-934?page=com.atlassia n.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommen tId=12901055#action_12901055 ] Vinod K V commented on HTTPCLIENT-934:

How to Run Jmeter in command line
Aug 19, 2010
Hi Till now I was running the test scripts in GUI mode which I found it comfortable. Now my task is to run my scripts in non-gui mode. I require your help in executing it. I have created a test script in GUI mode and saved it as "cmdtc.jmx". Now…

create queue using command line
Aug 10, 2010
Hi, Is there a way to create/delete/purge a queue using command line tool ? ----- Charles Moulliard SOA Architect My Blog : http://cmoulliard.blogspot.com/ http://cmoulliard.blogspot.com/

certain facts not getting displayed on the command line
Jul 25, 2010
When I type facter on the command line without parameters I get a list of several facts. If I try to include a specific fact with the command, I sometimes get a value back and other times I don't. It seems that certain facts aren't returning…