[OGo-Users] ldap+kerberos authentication

[Adam Tauno Williams]

> This is shown in the webui.log after enabling PGDebugEnabled:
> Mar 04 23:25:07 ogo-webui-1.1 [22508]: PostgreSQL72 connection 
> established: <0x0x8b6d244[PGConnection]:  connection=0x0x8b35318>
> Mar 04 23:25:07 ogo-webui-1.1 [22508]: PostgreSQL72 channel 0x0x82da2c4 
> opened (connection=<0x0x8b6d244[PGConnection]:  connection=0x0x8b35318>)
> Mar 04 23:25:07 ogo-webui-1.1 [22508]: PG0x0x82da2c4 SQL: BEGIN TRANSACTION
> Mar 04 23:25:07 ogo-webui-1.1 [22508]: PG0x0x82da2c4 SQL: SELECT 
> t1.login, t1.is_locked, t1.password FROM  person t1 WHERE (t1.login = 
> 'root') AND (t1.is_account=1)
> Mar 04 23:25:07 ogo-webui-1.1 [22508]: PG0x0x82da2c4 SQL: COMMIT TRANSACTION
> PostgreSQL72 connection dropped 0x0x8b6d244 (channel=0x0x82da2c4)
> This repeats since some timeout.
> After the timeout the browser shows the login dialog for the defined 
> kerberos login.
> After giving the credentials  I see the  login-screen from ogo  with  
> the  username plus realm (ckent@AXG.LOCAL) and an empty password field.

Which probably means OGo doesn't believe the user is legitimate.

1.) You have logged in at least once and changed the "root" user's
password?
2.) Is "cketn@AXG.LOCAL" an account in OGo's database?

Did you read the bug report regarding this?
http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1121

Also this old thread might be valuable
http://mail.opengroupware.org/pipermail/users/2006-January/015501.html


> At this time mod-auth-kerb authenticated the user and the loginprompt 
> from ogo is shown in the browser.
> Now i can login as root with no errors.