Re: Separate keytab with mod_auth_kerb

[Love Hörnquist Åstrand <lha@kth.se>]

13 mar 2008 kl. 11.44 skrev Christian Ullrich:

> Hello all,
>
> I'm having trouble getting my Apache/mod_auth_kerb configuration to
> work. No matter what I do, it will only ever use /etc/krb5.keytab,
> instead of what I set as Krb5KeyTab in httpd.conf.
>
> The system is FreeBSD 7.0, with Heimdal 1.0.1 compiled from ports, but
> it doesn't work with Heimdal 1.1, either. My Apache (2.2.8) is using
> the prefork MPM.

Can you starting the apache in debug mode (-X) and put a breakpoint in  
the _gsskrb5_register_acceptor_identity function to see if its called ?

You can also set a breakpoint in _gsskrb5_accept_sec_context and see  
if _gsskrb5_keytab is set.

gdb -q --args httpd -X --other-args
(gdb) r
.... ^C
(gdb) b _gsskrb5_register_acceptor_identity
(gdb) b _gsskrb5_accept_sec_context
(gdb) c
...
(gdb) p _gsskrb5_keytab

should do it.

Love