LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva
User Name
Password
Mandriva This Forum is for the discussion of Mandriva (Mandrake) Linux.

Notices

Reply
 
LinkBack Search this Thread
Old 07-20-2004, 10:04 AM   #1
roger.wernersso
LQ Newbie
 
Registered: Jul 2004
Location: London, U.K.
Distribution: Mandrake
Posts: 11

Rep: Reputation: 0
Question Q: apache and kerberos


Hello list, I'm new here. I need some help.

Problem:
--------

I've got a problem with invalid commands when I start Apache (apachectl start). I get the following reply:

Starting httpd2: [Tue Jul 20 12:26:13 2004] [warn] module auth_kerb_module is already loaded, skipping
Syntax error on line 20 of /etc/httpd/conf.d/11_mod_auth_kerb.conf:
Invalid command 'KrbMethodNegotiate', perhaps mis-spelled or defined by a module not included in the server configuration
[FAILED]

What am I doing wrong? What do I do to enable the Krb* commands?

Background:
-----------

Yes, I'm deliberately trying to load the module twice, just to make sure I'm actually loading it. :-)

I searched through the forum archives, plus searched Google for a couple of hours. I think it's a Mandrake-Apache-Kerberos problem, not Apache specific, not Kerberos specific, but something to do with Apache using Kerberos on Mandrake.

I run Linux on i386, Mandrake 10 to be precise. I've installed the following RPMs:
apache2-mod_auth_kerb-2.0.47_5.0-0.2mdk
apache2-common-2.0.47-6mdk
apache2-modules-2.0.47-6mdk
apache2-mod_ssl-2.0.47-6mdk
apache2-2.0.47-6mdk
apache-conf-2.0.47-8mdk
apache2-manual-2.0.47-6mdk

They are actually from Mandrake 9.2, as 10 comes with Apache 2.0.48 without mod_auth_kerb.

Now, I've added the following to /etc/httpd/conf.d/11_mod_auth_kerb.conf, just to get started:

<Directory "/var/www/cgi-bin/https">
AllowOverride Limit AuthConfig Options
Options ExecCGI
SSLOptions +StdEnvVars
AllowOverride None
Options None
Order allow,deny
Allow from all
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate off
KrbAuthoritative on
KrbVerifyKDC off
KrbAuthRealm QUBESOFT.COM
Krb5Keytab /etc/httpd/auth/apache.keytab
KrbSaveCredentials off
<Limit GET POST>
require valid-user
</Limit>
</Directory>

I've got Kerberos running since before. Kinit and the rest works.

Regards
Roger Wernersson
 
Old 07-20-2004, 10:42 AM   #2
roger.wernersso
LQ Newbie
 
Registered: Jul 2004
Location: London, U.K.
Distribution: Mandrake
Posts: 11

Original Poster
Rep: Reputation: 0
Answering my own post:

By putting comments on some of the keywords I can actually make it run. The following keyworkds doesn't work:
KrbMethodNegotiate
KrbAuthoritative
KrbVerifyKDC
Krb5Keytab

The following actually does:
KrbAuthRealm
KrbSaveCredentials

Moving on to other things now. Working out exactly why some keywords doesn't work, and how to set the values anyway, will have to wait.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
kerberos denning Slackware 1 11-02-2005 07:04 AM
Apache+PHP+PostgreSQL+Kerberos+Windows 2000 AD Automagic logon slacky Linux - Security 1 06-28-2005 12:13 PM
Kerberos Krizzc Slackware 0 10-21-2004 07:10 AM
Kerberos V5 integrated to Apache on linux easwaranvp Linux - Security 1 07-01-2004 04:04 PM
Kerberos krieger Linux - Security 1 01-29-2002 01:40 PM


All times are GMT -5. The time now is 06:04 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration