Installation and Maintenance

Switch from passwd to negotiate

To switch from Kerberos password to negotiation, Apache and the client need a few configuration steps:
 
In Apache's configuration the

  • Krb5Negotiate must be set to "on" and the
  • KrbVerifyKDC can (and should) be set to "on" too.
  • Krb5Passwd is set to "off" now.
  • Krb5Keytab sets the keytab file location
On the client side the browser needs the information that Kerberos negotiation is allowed for the url of the server.



Information Message
No comment has been posted yet.