apache kerberos auth + tartomanyi windows vista

Web, mail, IRC, IM, hálózatok

Sziasztok!
xp kliens eseteben szepen letrejon az automatikus authentikacio, viszont windows vista alatt feldobja a bejelentkezo ablakot.
error logban ennyi van: gss_accept_sec_context() failed: A token was invalid (Unknown code ggss 12)

Valakinek van valami otlete?
Koszonom!

  • 2394 megtekintés

( zolo | 2007. 04. 19., cs – 10:01 )

Hatha masnak is jol jon:

valoszinuleg az a gond, hogy nem A recordkent lett felveve a tickethez szolo hostname, hanem aliaskent. IE7 pedig lekerdi az A recordot es azzal keri a kerberos ticketet, viszont nem erre lett kiallitva a http keytab.

linux alol mar mukodik.
de vindozbol nem tudom mit kellene meg beallitanom hogy mukodjon.
amit probaltam: win2k + firefox 2.0.0.3 vagy ie6 ugyanaz a hiba
azt mondja hogy NTLM tokent kapott

[Fri May 04 16:09:18 2007] [debug] src/mod_auth_kerb.c(1485): [client 192.168.x.y] kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
[Fri May 04 16:09:18 2007] [debug] src/mod_auth_kerb.c(1172): [client 192.168.x.y] Acquiring creds for HTTP/server.domain.tld@DOMAIN.TLD
[Fri May 04 16:09:18 2007] [debug] src/mod_auth_kerb.c(1316): [client 192.168.x.y] Verifying client data using KRB5 GSS-API
[Fri May 04 16:09:18 2007] [debug] src/mod_auth_kerb.c(1332): [client 192.168.x.y] Verification returned code 589824
[Fri May 04 16:09:18 2007] [debug] src/mod_auth_kerb.c(1359): [client 192.168.x.y] Warning: received token seems to be NTLM, which isn't supported by the Kerberos module. Check your IE configuration.
[Fri May 04 16:09:18 2007] [error] [client 192.168.x.y] gss_accept_sec_context() failed: A token was invalid (Token header is malformed or corrupt)

ezek alapjan csinaltam:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecu…
http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/kerb…
es linux alatt mukodik is!

van valami otleted?
koszi!