<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Lucida Console";
panose-1:2 11 6 9 4 5 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Sprechblasentext Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.E-MailFormatvorlage18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.SprechblasentextZchn
{mso-style-name:"Sprechblasentext Zchn";
mso-style-priority:99;
mso-style-link:Sprechblasentext;
font-family:"Tahoma","sans-serif";
mso-fareast-language:DE;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hm, with kinit i get a ticket, so I believe that my /etc/krb5.conf is working<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I also create an SPN (HTTP/mercurial-test.dom.lo@DOM.LO) and keytab in my active directory and copy the keytab to the configured location on the
server. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">When I open the zanata web page and click the logon button, I got an 403er error. I set the loglevel to trace and also “-Dsun.security.krb5.debug=true”
but not error is shown in server.log. during logon, I look with tcpdump to traffic, but packets on port 88<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Idea?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">bjoern<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Carlos Munoz [mailto:camunoz@redhat.com]
<br>
<b>Gesendet:</b> Dienstag, 22. September 2015 23:43<br>
<b>An:</b> Ramann, Björn<br>
<b>Cc:</b> zanata-users@redhat.com<br>
<b>Betreff:</b> Re: [zanata-users] Auth with kerberos<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The way it works (when the setup is correct) is that Zanata will try to authenticate using Kerberos tickets first. This involves interaction with the browser. If a ticket is not found, or the authentication is unsuccessful, Zanata will
show a login screen that will allow the user to enter a user name and password. I've found that in order for this to work, the aforementioned krb5.conf file is the key. I think in your case the fact that Zanata cannot connect to the authentication server is
why you don't see this screen.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">As for the format of the principal value, it looks like the format is correct, but the actual value is specific to each server in the end. You can take a look here: <a href="https://docs.oracle.com/javase/7/docs/jre/api/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html">https://docs.oracle.com/javase/7/docs/jre/api/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html</a>
for a bit more info.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Carlos <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><br>
On Wednesday, 23 September 2015, Ramann, Björn <<a href="mailto:Bjoern.Ramann@governikus.de">Bjoern.Ramann@governikus.de</a>> wrote:<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Two more question:</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">1.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D">
</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Without kerberos, i have a username and password form in the main page, with enabled Kerberos, there is no user and pass form. Is this correct? When yes, how
do I enter my credentials? </span><o:p></o:p></p>
<p><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">2.</span><span lang="EN-US" style="font-size:7.0pt;color:#1F497D">
</span><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">In the domain-security “host”, I have: <module-option name="principal" value="HTTP/<a href="javascript:_e(%7B%7D,'cvml','dc01.domain.com@DOMAIN.COM');" target="_blank">dc01.domain.com@DOMAIN.COM</a>"/><br>
Is there a detailed documentation about the syntax of the value?</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks!</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="javascript:_e(%7B%7D,'cvml','zanata-users-bounces@redhat.com');" target="_blank">
zanata-users-bounces@redhat.com</a> [mailto:<a href="javascript:_e(%7B%7D,'cvml','zanata-users-bounces@redhat.com');" target="_blank">zanata-users-bounces@redhat.com</a>]
<b>Im Auftrag von </b>Ramann, Björn<br>
<b>Gesendet:</b> Dienstag, 22. September 2015 13:28<br>
<b>An:</b> <a href="javascript:_e(%7B%7D,'cvml','zanata-users@redhat.com');" target="_blank">
zanata-users@redhat.com</a><br>
<b>Betreff:</b> [zanata-users] Auth with kerberos</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">hi@all,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">i try to auth users with Kerberos to our windows Active directory and configure:</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><bindings></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#0000BF"><!-- <simple name="java:global/zanata/security/auth-policy-names/internal" value="zanata.internal"/> --></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#0000BF"><!-- <simple name="java:global/zanata/security/auth-policy-names/openid" value="zanata.openid"/>
</span></span><span style="font-size:9.0pt;font-family:Wingdings">à</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><simple </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"java:global/zanata/security/auth-policy-names/kerberos"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"zanata.kerberos"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><simple </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"java:global/zanata/security/admin-users"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"admin"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><simple </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"java:global/zanata/files/document-storage-directory"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"${user.home}/zanata/files"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><simple </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"java:global/zanata/email/default-from-address"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"</span></span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#BF0000"><a href="javascript:_e(%7B%7D,'cvml','noreply@blub.com');" target="_blank"><span lang="EN-US">noreply@blub.com</span></a></span><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console";color:#BF0000">"</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console"">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"></bindings></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">…</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><security-domain
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">name</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:black">=</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#BF0000">"zanata.kerberos"</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><authentication></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><login-module </span><span style="color:#00BF00">code</span>=<span style="color:#BF0000">"org.jboss.security.negotiation.spnego.SPNEGOLoginModule"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">flag</span>=<span style="color:#BF0000">"sufficient"</span><span style="color:#00BFBF">></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"password-stacking"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"useFirstPass"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"serverSecurityDomain"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"host"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"removeRealmFromPrincipal"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"true"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"usernamePasswordDomain"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"krb5"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></login-module></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></authentication></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></security-domain></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><security-domain </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"krb5"</span><span style="color:#00BFBF">></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><authentication></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><login-module </span><span style="color:#00BF00">code</span>=<span style="color:#BF0000">"com.sun.security.auth.module.Krb5LoginModule"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">flag</span>=<span style="color:#BF0000">"sufficient"</span><span style="color:#00BFBF">></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"storePass"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"false"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"clearPass"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"true"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"debug"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"true"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"doNotPrompt"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"false"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></login-module></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></authentication></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></security-domain></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><security-domain </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"host"</span><span style="color:#00BFBF">></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><authentication></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><login-module </span><span style="color:#00BF00">code</span>=<span style="color:#BF0000">"com.sun.security.auth.module.Krb5LoginModule"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">flag</span>=<span style="color:#BF0000">"required"</span><span style="color:#00BFBF">></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"storeKey"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"true"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"useKeyTab"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"true"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"principal"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"</span></span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#BF0000"><a href="javascript:_e(%7B%7D,'cvml','HTTP/dc01.domain.com@DOMAIN.COM');" target="_blank"><b><span style="color:red">MailScanner
hat einen möglichen Täuschungsversuch durch "JavaScript" festgestellt.</span></b>
<span lang="EN-US">HTTP/dc01.domain.com@DOMAIN.COM</span></a></span><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console";color:#BF0000">"</span><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF">/></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:9.0pt;font-family:"Lucida Console"">
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BFBF"><module-option
</span><span style="font-size:9.0pt;font-family:"Lucida Console";color:#00BF00">name</span><span style="font-size:9.0pt;font-family:"Lucida Console"">=<span style="color:#BF0000">"keyTab"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"/opt/zanata/wildfly/standalone/configuration/jboss.keytab"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"doNotPrompt"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"true"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"><module-option </span><span style="color:#00BF00">name</span>=<span style="color:#BF0000">"debug"</span><span style="color:#00BFBF">
</span><span style="color:#00BF00">value</span>=<span style="color:#BF0000">"true"</span><span style="color:#00BFBF">/></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></login-module></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">
<span style="color:#00BFBF"></authentication></span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">But on the page, when I press login, I get da 403 and there is no fiel to type my credentials in.
</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Soft:</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,457Z INFO [org.quartz.core.QuartzScheduler] (ServerService Thread Pool -- 58) Scheduler DefaultQuartzScheduler_$_NON_CLUSTERED
started.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,755Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) App server release codename: Kenny</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,755Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) App server release version: 1.0.1.Final</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,755Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) WildFly Full version: 9.0.1.Final</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,757Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) ============================================</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,757Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) _____ _</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,757Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) /__ / ____ _____ ____ _/ /_____ _</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,757Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) / / / __ `/ __ \/ __ `/ __/ __ `/</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,758Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) / /__/ /_/ / / / / /_/ / /_/ /_/ /</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,758Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) /____/\__,_/_/ /_/\__,_/\__/\__,_/</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,758Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) Application version: 3.7.2</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,758Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) SCM: git-server-3.7.2</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,758Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) Red Hat Inc 2008-2015</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,758Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) ============================================</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,758Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) SPNEGO/Kerberos authentication: enabled</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Lucida Console"">13:25:45,759Z INFO [org.zanata.ZanataInit] (ServerService Thread Pool -- 58) Enable copyTrans: true</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Please advise!</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Thanks</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">bjoern</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<br>
-- <br>
Carlos A. Muñoz<br>
Software Engineering Supervisor<br>
Globalization<br>
Red Hat<o:p></o:p></p>
</div>
</body>
</html>