Authentication to Apache-Kerberos

Justin Taylor <[email protected]> Tue, 23 Aug 2016 17:59:26 +0000
Newsgroups gmane.comp.macosx.admin
Message-ID <f1a359033dc441bba610e5390167bf8f@VS-Exchange13.intranet.lorencook.com>
I have an Apache server using Kerberos authentication to serve internal apps, using Active Directory as the KDC.  This works fine for Windows clients.  We have a few Mac clients and none of them can access the apps on Apache.  The Macs are on the domain and can access other network resources.

On my R&D Mac, I do a klist in bash and it shows my tickets.  The working tickets show up like CIFS/host.domain.com-9IKiO1iGCm/[email protected]<mailto:CIFS/host.domain.com-9IKiO1iGCm/[email protected]>.  On the other hand, I have HTTP/host-9IKiO1iGCm/[email protected]<mailto:HTTP/host-9IKiO1iGCm/[email protected]> for the not working ticket.  I checked my Windows PC, and it has HTTP/host.domain.com-9IKiO1iGCm/[email protected]<mailto:HTTP/host.domain.com-9IKiO1iGCm/[email protected]>.

I know nothing about Mac, so I don't really know even where to start.  Any suggestions?


Single AD domain running Win2012
OS X El Capitan 10.11.6


Thanks