在 Docker 中设置 Apache2 + Kerberos。file.keytab - 是的。krb5.conf 中的设置是正确的。
root@container:/# klist
Ticket cache: FILE:/tmp/ticket
Default principal: учётка@DOMEN.RU
Valid starting Expires Service principal
03/15/24 04:42:42 03/15/24 14:42:42 krbtgt/[email protected]
renew until 03/22/24 04:42:32
Apache 中的设置:
<Location "/">
AuthType Kerberos
AuthName "УЧЁТКА"
KrbMethodNegotiate on
KrbMethodK5Passwd off
KrbServiceName HTTP/имя_сервера[email protected]
KrbAuthRealms DOMEN.RU
Krb5Keytab /etc/apache2/имя_сервера.keytab
KrbLocalUserMapping On
Require valid-user
</Location>
错误:
[Fri Mar 15 04:39:57.061033 2024] [auth_kerb:error] [pid 10:tid 140193378916096] [client 10.108.77.177:58138] gss_accept_sec_context() failed: Unspecified GSS failure. Minor code may provide more information (, No key table entry found for HTTP/имя_сервера[email protected])