mod_auth_gssapi + mod_waklog

David Barstis <[email protected]> Fri, 15 Dec 2023 11:34:25 -0500
Newsgroups gmane.comp.file-systems.openafs.devel
Message-ID <CA+Mp=mHXpaq-Gzg-dd8JCg_uo40Vz=VFgeTU1-FjbQb+ZttdAg@mail.gmail.com>
I've set up an Apache 2.4 server with mod _auth_gssapi and mod_waklog. To
test I created a simple script in cgi-bin to run klist -f and tokens then
echo KRB5CCNAME. cgi-bin is protected with a .htaccess file that does the
GSSAPI/Kerberos authentication. WaklogAFSCell is defined
and WaklogEnabled and WaklogUseUserTokens are set to On.

Running the script shows that I'm not getting a token.

Ticket cache: FILE:/var/run/httpd/htcacheclean/[email protected]
Default principal: [email protected]

Valid starting     Expires            Service principal
12/14/23 15:23:21  01/13/24 15:23:21  krbtgt/[email protected]
Flags: FfT


Tokens held by the Cache Manager:

   --End of list--
“KRB5CCNAME=FILE:/var/run/httpd/htcacheclean/[email protected]”

I set LogLevel to debug and can see entries for mod_waklog and phase calls.
Can anyone offer any suggestions, tips, advice to help me troubleshoot? Any
and all advice would be greatly appreciated.

-- 
--------------------------------------------------------
David R. Barstis
Center for Research Computing
University of Notre Dame
Notre Dame, IN  46556
(574) 631-8575
--------------------------------------------------------