Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Jul 2015 12:04:58 +0200 (CEST)
From:      Raimund Sacherer <rs@logitravel.com>
To:        Greg Groth <ggroth@gregs-garage.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Kerberos
Message-ID:  <1705342318.38348913.1437127498114.JavaMail.zimbra@logitravel.com>
In-Reply-To: <4582000dcfad2dc26ca4076d2024f23f@mail.gregs-garage.com>
References:  <75d664eeb361264e9b4560a89b1a32bf@mail.gregs-garage.com> <1383995814.37100404.1437030764957.JavaMail.zimbra@logitravel.com> <4582000dcfad2dc26ca4076d2024f23f@mail.gregs-garage.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello Greg, 

on a first glance I can't see anything really out of order, if it helps, I use(d) this pages to setup kerberos and apache auth: 
http://www.grolmsnet.de/kerbtut/ 
http://blog.scottlowe.org/2006/08/10/kerberos-based-sso-with-apache/ 

The account you create for the service principal has to be a user account, it does not work with a machine account. 

If you authenticate without the key tab, just a user from the ad (create a user and test a kinit user@EXAMPLE.COM, later klist). Check if a simple user authentication works in the first place. 

Hope that this will help you in any way, 

Best 
Ray 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1705342318.38348913.1437127498114.JavaMail.zimbra>