Problem is that macro APLOG_MARK in apache < 2.3.9 expands to two values: file and line. But in newer versions it expands to three values: file, line and module index. To solve this problem change signature of mod_auth_kerb.c:log_rerror() to: log_rerror(const char *file, int line, int module_index, int level, int status, const request_rec *r, const char *fmt, ...) // module_index added And change call of ap_log_rerror() to: ap_log_rerror(file, line, module_index, level | APLOG_NOERRNO, status, r,...
Problem is that macro APLOG_MARK in apache < 2.3.9 expands to two values: file and line. But in newer versions it expands to three values: file, line and module index. To solve this problem change signature of mod_auth_kerb.c:log_rerror() to: log_rerror(const char file, int line, int module_index, int level, int status, const request_rec r, const char *fmt, ...) // module_index added And change call of ap_log_rerror() to: ap_log_rerror(file, line, module_index, level | APLOG_NOERRNO, status, r, "%s",...
I replaced the patch in ticket #61 with this instead(quite some time ago): ``` --- ./src/mod_auth_kerb.c.org 2020-08-13 17:30:15.901691505 +0200 +++ ./src/mod_auth_kerb.c 2020-08-13 17:35:00.069621299 +0200 @@ -2062,6 +2062,11 @@ static int have_rcache_type(const char type) { + / rcache "none" is always present in modern mit-krb5 + * but krb5_rc_resolve_full() has been removed in 1.18.x + * so hardcode to true */ + return 1; +#if 0 krb5_error_code ret; krb5_context context; krb5_rcache id = NULL;...
Fails to build with MIT Kerberos 1.18
This makes mod_auth_kerb load when built against mit-krb5-1.18.2 Not run tested yet
FYI I've just added this patch to the Debian package of mod_auth_kerb in response to Debian bug #934043.
Hello, I guess the package isn't maintained anymore. I've the same problems compiling mod_auth_kerb inside a Alpine Docker image. The Alpine projects seem to maintain the package by their own and you can find the patches here: https://git.alpinelinux.org/aports/tree/main/apache-mod-auth-kerb?id=ae380974c20d60217bedada8747089dbc1409609 Maybe you can find the same files for Debian/Ubuntu too.
Use after free in authenticate_user_krb5pwd()
Fail during compiling mod apache
Question about handling of Kerberos Tickets.
How was this solved? I cannot find the apache configuration directive to use in order to strip the @realm from the uid. Does anyone know? Thank you in advance!
Did this ever progress? Any hope of Kerberos falling back to NTLMv2 authentication?
Kerberos service name configuration
constrained delegation
Looks like this should be done somewhere in function authenticate_user_krb5pwd, where...
Strim REALM\ in username
Michael Thank you so much for you help.
Certainly. On the sourceforge page for the Kerberos Module for Apache, click Support,...
Hello Michael. Could you post information about the patch for Apache 2.4 that you...
Nevermind. I found the patch for Apache 2.4 and it fixed it. Please close this t...
Compile error on Mac OS X 10.11.6
kerberos not working with several ServerAlias in Vhost
Login fails if Password contains § Symbol
Configure succeeds, but apxs fails big time on CentOS 7
apache 2.2 on win server 2012
I've read in one closed ticket that it's possible with visual studio. download the...