X-Git-Url: http://www.project-moonshot.org/gitweb/?p=mod_auth_kerb.cvs%2F.git;a=blobdiff_plain;f=src%2Fmod_auth_kerb.c;h=56e72970e9188eff8792524e4930fc9f272fca2d;hp=46e870b37ef008a4e19ba089d13a821cd8465906;hb=853e617855f6253de43c6b0c6e4f9a2119cca8ed;hpb=dd2f3eb1e6e517dccaf6f5d9ebd963aceeaafe2c diff --git a/src/mod_auth_kerb.c b/src/mod_auth_kerb.c index 46e870b..56e7297 100644 --- a/src/mod_auth_kerb.c +++ b/src/mod_auth_kerb.c @@ -558,7 +558,7 @@ verify_krb5_init_creds(request_rec *r, krb5_context context, krb5_creds *creds, goto end; } log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, - "Using principal %s to verify authenticity of KDC", server_name); + "Trying to verify authenticity of KDC using principal %s", server_name); free(server_name); if (!krb5_principal_compare (context, ap_req_server, creds->server)) { @@ -1209,6 +1209,10 @@ authenticate_user_gss(request_rec *r, kerb_auth_config *conf, } sprintf(ktname, "KRB5_KTNAME=%s", conf->krb_5_keytab); putenv(ktname); +#ifdef HEIMDAL + /* Seems to be also supported by latest MIT */ + gsskrb5_register_acceptor_identity(conf->krb_5_keytab); +#endif } ret = get_gss_creds(r, conf, &server_creds);