Re: [modauthkerb] Proxy using AD

[Thorsten H. <yo...@gm...>]

Hi,

> Kerberos errors have more digits in them usually.  Also if it was a
> Kerberos error code then the log wouldn't say "unknown code".

Well, Apache gives me "minor_status:96c73ad5", which seems to be KRB5KDC_ERR_NONE - 213 accd. to http://www.shrubbery.net/solaris9ab/SUNWdev/GSSAPIPG/p30.html. (However, the table ends at 183=KRB5_KT_NOWRITE.)


> I'd suspect that it was an OS, maybe filesystem, error.  Is the keytab
> file readable by the web server, for instance?

Thanks for the hint! The file was readable, but it seems that some component can't cope with symlinks. Now that I replaced it with a hard link I get a new error (bliss!).


> More generally wireshark is pretty good about decoding packets.

Yes it is, and I use it, I just wanted to ask whether there is something more specialized.

-- 
Cheers,
Thorsten
-- 
Neu: GMX De-Mail - Einfach wie E-Mail, sicher wie ein Brief!  
Jetzt De-Mail-Adresse reservieren: http://portal.gmx.net/de/go/demail