Menu

Problem with SPNEGO authentication in Tomcat

Help
Jatym
2008-01-14
2013-04-16
  • Jatym

    Jatym - 2008-01-14

    Hi
    While im using only Apache http server, the authentication works good (using .htaccess files or just configured in <Directory /> directive), but when I add mod_jk to work with tomcat, mod_spnego is not working (he is not used)...
    How to configure apache and tomcat (both on windows) to work properly with mod_spnego ?

    Regards
    Piotr Jatym

     
    • Markus Moeller

      Markus Moeller - 2008-01-15

      Piotr,

      I haven't done much with TomCat so I can't tell why it sin't working as you expect. If I have time I will check.  Could you let me know how you set it up ?

      Markus

       
    • Jatym

      Jatym - 2008-01-28

      Hi

      Sorry for replaying so late.
      The problem was in wrong connector configuration in Tomcats server.xml, which provided overriding Apache Httpd authentication by Tomcats authentication.
      The config should looks like this:
      <!-- Define an AJP 1.3 Connector on port 8009 -->
      <Connector port="8009" enableLookups="true" redirectPort="8443" protocol="AJP/1.3" tomcatAuthentication="false" />

      Now I have another problem, the authentication works good, except when I'm trying to authenticate from computer on which works Apache ? Any idea what's wrong ?

      Regards
      Piotr

       
    • Jatym

      Jatym - 2008-01-28

      Error.log:
      [Mon Jan 28 12:13:31 2008] [error] [client 192.168.1.41] mod_spnego: QueryContextAttributes failed; SSPI: Podane doj\x9ccie jest nieprawid\xb3owe.\r\n(-2146893055)]\

      "Podane doj\x9ccie jest nieprawid\xb3ow" means: Given access is wrong.

       
      • Markus Moeller

        Markus Moeller - 2008-01-28

        I have seen that too. For some reason unknown to me Windows uses only NTLM when client and server are on the same machine.

        Markus

         

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.