Paul Snyder schrieb: > Good morning all, > > I have kerberos authentication working properly with one exception: when the > service principal's ticket expires in the kerberos cache on the server, the > http server does not automatically contact the KDC renew it's credentials. Maybe I'm totally off here but I think that's what keytabs are for. IOW instead of running kinit, use a keytab and export KRB5_KTNAME=/path/to/keytab in your initscript. cheers Paul --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|