[Bug 507490] [NEW] credentials cache file not created

[David Pavlotzky]

Public bug reported:

Binary package hint: libapache-mod-auth-kerb

Description:    Ubuntu 9.10
Release:        9.10

libapache2-mod-auth-kerb:
  Installed: 5.3-5build1
  Candidate: 5.3-5build1
  Version table:
 *** 5.3-5build1 0
        500 http://nl.archive.ubuntu.com karmic/main Packages
        100 /var/lib/dpkg/status

Hi,

I am building a SSO intranet solution using the usual LAMP suspects.

I have set the following option in /etc/apache2/conf.d/kerb.conf:

KrbSaveCredentials on

so I can use the credentials to connect to an ActiveDirectory LDAP
server.

I have Kerberos working correctly (Explorer is authenticated) and de
KRB5CCNAME ($_SERVER['KRB5CCNAME']) is present and contains a filename.
The file (the credentials cache) is never created however and cannot be
used.

This used to be working on Jaunty but broke in Karmic.

With LogLevel set to debug in Apache I get the following message in
/var/log/apache2/error.log:

[Thu Jan 14 12:29:20 2010] [error] [client xxx.x.x.xxx] Cannot store
delegated credential (gss_krb5_copy_ccache: An unsupported mechanism was
requested (Unknown error))

After some research I found the following:

http://krbdev.mit.edu/rt/Ticket/Display.html?id=6594

wich I believe is the source of this problem.
Could the provided patch be backported?

Pretty please with suger on top of course...

** Affects: libapache-mod-auth-kerb (Ubuntu)
     Importance: Undecided
         Status: New

-- 
credentials cache file not created
https://bugs.launchpad.net/bugs/507490
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libapache-mod-auth-kerb in ubuntu.