In RHEL 6, curl with ntlm option fails with "gss_init_sec_context() failed: : Credentials cache file '/tmp/krb5cc_5156' not foundWWW-Authenticate: Negotiate"
Issue
- While using curl for accessing Exchange 2010 server using ntlm option, it fails with following error.
i.e:
$ curl -v -k --request RPC_IN_DATA -A MSRPC --digest -u 'user1\Healthcheck:********' -H "Host: email.example.com" "https://host1.user1.example.com/rpc/rpcproxy.dll?email.example.com:6001"
* About to connect() to host1.user1.example.com port 443 (#0)
* Trying 10.0.0.1... connected
* Connected to host1.mail.example.com (x.x.x.x) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* warning: ignoring value of ssl.verifyhost
* skipping SSL peer certificate verification
* SSL connection using TLS_RSA_WITH_AES_128_CBC_SHA
* Server certificate:
* subject: CN=email.example.com,OU=90,O=Example & Company,L=Moline,ST=Illinois,C=US,serialNumber=abCDEF<a-AAAAAAA
* start date: Mar 25 01:34:16 2012 GMT
* expire date: Mar 28 14:35:37 2013 GMT
* common name: email.example.com
* issuer: CN=Example SSL CA,O="Example, Inc.",C=US
* Server auth using Digest with user 'user1\Healthcheck'
> RPC_IN_DATA /rpc/rpcproxy.dll?email.example.com:6001 HTTP/1.1
> User-Agent: MSRPC
> Accept: */*
> Host: email.example.com
>
< HTTP/1.1 401 Unauthorized
< Content-Type: text/html
< Server: Microsoft-IIS/7.5
* gss_init_sec_context() failed: : Credentials cache file '/tmp/krb5cc_5156' not foundWWW-Authenticate: Negotiate
< WWW-Authenticate: NTLM
< X-Powered-By: ASP.NET
< Date: Fri, 01 Feb 2013 21:05:56 GMT
< Content-Length: 58
<
* Connection #0 to host host1.user1.example.com left intact
* Closing connection #0
You do not have permission to view this directory or page.
Environment
- Red Hat Enterprise Linux (RHEL) 6.2 and later
curl
versions between7.19.7
and7.19.7-37.el6_5.3
affected
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.