[SOLVED] Kerberos and Selfservice

[Renaud Villet]

Hello,
we have configured Kerberos for machine registration, and it works well. However, since version 2.1, self-service no longer launches on client machines, without any error message, but it does launch correctly when we set `use_kerberos=0` in `wapt-get.ini`.
Thank you for your help.

[sfonteneau]

Good morning

For Kerberos authentication in self-service

Is the wapt-get.ini file on the agent correctly configured in this mode?

Code: Select all

[global]
use_kerberos=True
service_auth_type=waptserver-ldap

And on the Wapt server in /opt/wapt/conf/waptserver.ini

Code: Select all

[options]
ldap_auth_server = srvads.mydomain.lan
ldap_auth_base_dn = DC=mydomain,DC=lan
ldap_account_service_login = wapt-ldap@mydomain.lan
ldap_account_service_password = password

What is often forgotten is to add ldap_account_service_login and ldap_account_service_password
Without this, the server can authenticate the user correctly but cannot know which groups they belong to

[Renaud Villet]

OK great, it works.
Thank you!

[smandel]

Hello,

I've applied the configuration correctly, but nothing is happening either.
Authentication works for agents trying to connect to the server.
Where can I view the logs?

Thank you.

[smandel]

Everything is fine after adding:

Code: Select all

ldap_auth_ssl_enabled = False

THANKS !