using Kerberos Authentication with mod_auth_kerb and Konqueror

Since version 3.3.1 KDE provides Kerberos HTTP Authentication in kdelibs. That means now you can use mod_auth_kerb with Konqueror, too! Here some hints for configuration and setup, I am using KDE 3.3.1, W2K as KDC an MIT 1.3.5 libs on my clientmaschine.

In HEAD version of KDE Konqueror has SPNEGO support, too, but only when linked against Heimdal7pre, because only Heimdal7pre provides full SPNEGO support. It was never tested if that works against IIS servers.

• Build KDE with Kerberos-support. on my Gentoo system i have only to add 'kerberos' to the USE Flags in /etc/make.conf.
• Make sure your /etc/krb5.conf is correct, make sure that [domain_realm] part covers the FQDN of the webserver maschine.
• use kinit to get a TGT...
• ...and Konqueror should now use Kerberos for authentication instead of prompting for username/password!

Here some debugging help if it does not work as expected:

• You could try to put the following in .kde/share/config/kdebugrc and have a closer look to /tmp/kdebug.dbg for helpful log messages:

  [7103]
  AbortFatal=true
  ErrorFilename=/tmp/kdebug.dbg
  ErrorOutput=0
  FatalFilename=/tmp/kdebug.dbg
  FatalOutput=0
  InfoFilename=/tmp/kdebug.dbg
  InfoOutput=0
  WarnFilename=/tmp/kdebug.dbg
  WarnOutput=0
  
  [7113]
  AbortFatal=true
  ErrorFilename=/tmp/kdebug.dbg
  ErrorOutput=0
  FatalFilename=/tmp/kdebug.dbg
  FatalOutput=0
  InfoFilename=/tmp/kdebug.dbg
  InfoOutput=0
  WarnFilename=/tmp/kdebug.dbg
  WarnOutput=0
  

  Thanks to Karsten Künne for that hint!

last update 2004-12-08