Wednesday, 2 January 2019

Kerberos Authentication failed

I am using Kerberos for authentication my HTTP service,

I configured using the link : https://www.jamielennox.net/blog/2015/02/12/step-by-step-kerberized-keystone/ and It is successfully configured.

When I try to test this using the python code http://python-notes.curiousefficiency.org/en/latest/python_kerberos.html#wrapping-this-up-in-a-helper-class

While verifying

It passes the following kind of code,
1) kerberos.authGSSClientInit
2) kerberos.authGSSClientStep(krb_context, auth_details)

It fails in the following part of the code,
1) kerberos.authGSSClientClean(krb_context)

I printed the logs below,

As a response for this authGSSClientInit in the header, I receive the following ticket,

Negotiate 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

As a response for this authGSSClientStep in the header, I receive the following ticket,

{'Content-Length': '114', 'Vary': 'X-Auth-Token', 'Keep-Alive': 'timeout=15, max=100', 'x-openstack-request-id': 'req-2ab03ba1-db8b-46d3-a972-0f8eb9d19653', 'Connection': 'Keep-Alive', 'Date': 'Fri, 28 Dec 2018 13:44:48 GMT', 'Server': 'Apache/2.4.6 (CentOS)', 'Content-Type': 'application/json', 'WWW-Authenticate': 'Negotiate YIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvqkiNM9EGO2X2/E7CAYJfCS5o/pI1RAgftHBlbNzTr+9vbYnlTrPX+nSHRohw9LLn6Y5lsHDSVZcm8aNrHT3NnVprzoHY8vGoYCmk+165ZW6Sl7KTRoHkiZKvWqML99Gfo7rG485pjY7Ssg6bLMdI, Keystone uri="http://openstack.companyipasub.com:5000/krb"'}

As a response for this authGSSClientClean in the header, I receive the following ticket,

I just received the response as None, As per code, If its received as None it is a failure, so It fails in the last step, Could some one from Kerberos help me in this, If you need any other details I can provide that.

Thanks,
Harry



from Kerberos Authentication failed

No comments:

Post a Comment