On Fri, 21 Dec 2007, Russ Allbery wrote:
Oh, okay. So you're typing in something that looks like a fully qualified principal and mod_auth_kerb is rejecting it rather than bailing on it even though you're telling it to do fall-through.
Yes, that is exactly the issue I am stuck with - sorry making you work so hard to get the relevant information.
Yeah, that sounds like a simple and fixable bug and not the case that I thought you were running into.
Great, that would allow me have Single Sign On for local folk, and still allow seamless LDAP based HTTP access for the rest of the corporation - just like I do for actual logon to the machine (via PAM). I looked at just using PAM for http auth, but that throws SPNEGO out, forcing basic auth, which is a shame. -- Rick Nelson "...[Linux's] capacity to talk via any medium except smoke signals." (By Dr. Greg Wettstein, Roger Maris Cancer Center) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
