主页 / 问题 / 1571659
Accepted
миха капа
Asked:2024-03-15 12:51:18 +0000 UTC2024-03-15 12:51:18 +0000 UTC

在 Docker 中设置 Apache2 + Kerberos - 错误 找不到关键表条目

  • 772

在 Docker 中设置 Apache2 + Kerberos。file.keytab - 是的。krb5.conf 中的设置是正确的。

root@container:/# klist
Ticket cache: FILE:/tmp/ticket
Default principal: учётка@DOMEN.RU

Valid starting     Expires            Service principal
03/15/24 04:42:42  03/15/24 14:42:42  krbtgt/[email protected]
        renew until 03/22/24 04:42:32

Apache 中的设置：

    <Location "/">
       AuthType Kerberos
       AuthName "УЧЁТКА"
       KrbMethodNegotiate on
       KrbMethodK5Passwd off
       KrbServiceName HTTP/имя_сервера[email protected]
       KrbAuthRealms DOMEN.RU
       Krb5Keytab /etc/apache2/имя_сервера.keytab
       KrbLocalUserMapping On
       Require valid-user
    </Location>

错误：

[Fri Mar 15 04:39:57.061033 2024] [auth_kerb:error] [pid 10:tid 140193378916096] [client 10.108.77.177:58138] gss_accept_sec_context() failed: Unspecified GSS failure.  Minor code may provide more information (, No key table entry found for HTTP/имя_сервера[email protected])
docker

1 个回答

  1. Best Answer

    当使用 Apache 模块 libapache2-mod-auth-kerb 或 mod-auth-kerb 时，该错误信息并不多，特别是因为该模块本身已过时且不建议使用。使用libapache2-mod-auth-gssapi模块时，出现另一个错误：

    [Tue Mar 19 09:59:06.511296 2024] [auth_gssapi:error] [pid 10:tid 140228761200320] [client 10.108.77.177:59587] GSS ERROR In Negotiate Auth: gss_accept_sec_context() failed: [Unspecified GSS failure.  Minor code may provide more information (Request ticket server HTTP/[email protected] kvno 5 found in keytab but not with enctype rc4-hmac)]

    以下帮助解决了未经授权的问题和此错误： 在此输入图像描述

    在帐户属性中，设置“此帐户支持128\256位加密”

    • 0

相关问题