pythongssapi / pythongssapi/python-gssapi
No key table entry found matching HTTP/myspn.domain.local/domain.local@
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 116
- Forks
- 55
- Avg merge
- 1d 24m
- Merged PRs (30d)
- 2
Description
I've been testing this library with a kerberos setup that works using Apache/mod_auth_gssapi . While my krb5.conf and krb5.keytab work with Apache with this library I continually get the following error:
No key table entry found matching HTTP/myspn.domain.local/domain.local@
Notice the domain being appended to the end of the SPN and being blank after the @ sign.
kinit -kt krb5.keytab works fine.
My environment:
- Python 3.11.2
- OS: Debian Bookworm
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the error with the reported krb5.conf and krb5.keytab on Debian Bookworm, then compare the library's behavior with Apache/mod_auth_gssapi and the successful kinit -kt krb5.keytab command. Done means the library no longer appends the domain to the SPN or leaves the realm empty for this setup.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100