mod_auth_gssapi + mod_waklog
David Barstis <[email protected]> Fri, 15 Dec 2023 11:34:25 -0500
| Newsgroups | gmane.comp.file-systems.openafs.devel |
|---|---|
| Message-ID | <CA+Mp=mHXpaq-Gzg-dd8JCg_uo40Vz=VFgeTU1-FjbQb+ZttdAg@mail.gmail.com> |
I've set up an Apache 2.4 server with mod _auth_gssapi and mod_waklog. To test I created a simple script in cgi-bin to run klist -f and tokens then echo KRB5CCNAME. cgi-bin is protected with a .htaccess file that does the GSSAPI/Kerberos authentication. WaklogAFSCell is defined and WaklogEnabled and WaklogUseUserTokens are set to On. Running the script shows that I'm not getting a token. Ticket cache: FILE:/var/run/httpd/htcacheclean/[email protected] Default principal: [email protected] Valid starting Expires Service principal 12/14/23 15:23:21 01/13/24 15:23:21 krbtgt/[email protected] Flags: FfT Tokens held by the Cache Manager: --End of list-- “KRB5CCNAME=FILE:/var/run/httpd/htcacheclean/[email protected]” I set LogLevel to debug and can see entries for mod_waklog and phase calls. Can anyone offer any suggestions, tips, advice to help me troubleshoot? Any and all advice would be greatly appreciated. -- -------------------------------------------------------- David R. Barstis Center for Research Computing University of Notre Dame Notre Dame, IN 46556 (574) 631-8575 --------------------------------------------------------