[modauthkerb-help] [modauthkerb - Help] Unsupported key table format version number??

[<no...@so...>]

Read and respond to this message at: 
https://sourceforge.net/forum/message.php?msg_id=1788031
By: gschuster

Hello all,

I'm trying to get Apache on a FreeBSD machine to authenticate to a Windows 2000
Active Directory server with Kerberos using mod_auth_kerb, but I'm having some
problems.

Here is my version info:

FreeBSD 4.5
Apache 1.3.24_3
krb5-1.2.6 (MIT Kerberos)
mod_auth_kerb 4.12_1

I installed mod_auth_kerb from the FreeBSD ports tree.

When I attempt to access the protected directory with IE, it prompts for a username
and password as it should, and if I supply an invalid username or password,
authentication fails as it should.  But if I supply the correct credentials,
I get an Internal Server Error from Apache.  Checking the error log reveals
the following:

[Fri Dec  6 10:23:27 2002] [error] access to /private/ failed for 10.101.54.2,
reason: krb5_rd_req(): Unsupported key table format version number (-1765328171)

Here is the directory entry from my http.conf file:

<Directory "/usr/local/www/data/private">
AuthType KerberosV5
AuthName "Kerberos Login"
AllowOverride AuthConfig
KrbAuthRealm DEV.LOCAL
Krb5Keytab /usr/local/etc/apache/keytab/www.keytab
require valid-user
</Directory>

Here is the ktpass command I issued on the AD server to generate the keytab
file, which I then copied to the BSD machine:

C:\>ktpass -princ www/bsd...@DE... -mapuser dev04www -pass password
-out www.keytab

Both the keytab file and its enclosing folders are readable by all users.  If
I remove the keytab file, I get the same behavior.  If I remove the directory
containing the keytab file, I get a No such file or Directory error.

Here is my krb5.conf file:

[logging]
default = FILE:/var/log/krb5.log

[libdefaults]
   default_realm = DEV.LOCAL
#   dns_lookup_realm = true
#   dns_lookup_kdc = true
   default_tgs_enctypes = des-cbc-crc
   default_tkt_enctypes = des-cbc-crc

[realms]  
   DEV.LOCAL = {
      kdc = devad.dev.local:88
      kpasswd_server = devad.dev.local:464
      admin_server = devad.dev.local
      default_domain = dev.local
   }

[domain_realm]
   .dev.local = DEV.LOCAL
   dev.local = DEV.LOCAL

I'd greatly appreciate any help anyone can give, this has been driving us nuts
for some time now.  Thanks!

Greg

______________________________________________________________________
You are receiving this email because you elected to monitor this forum.
To stop monitoring this forum, login to SourceForge and visit: 
https://sourceforge.net/forum/monitor.php?forum_id=171554