Page 1 of 1

[SOLVED] Kerberos and Selfservice

Published: May 4, 2022 - 11:19 AM
by Renaud Villet
Hello,
we have configured Kerberos for machine registration, and it works well. However, since version 2.1, self-service no longer launches on client machines, without any error message, but it does launch correctly when we set `use_kerberos=0` in `wapt-get.ini`.
Thank you for your help.

Re: Kerberos and Selfservice

Published: May 4, 2022 - 2:25 PM
by sfonteneau
Good morning

For Kerberos authentication in self-service

Is the wapt-get.ini file on the agent correctly configured in this mode?

Code: Select all

[global]
use_kerberos=True
service_auth_type=waptserver-ldap
And on the Wapt server in /opt/wapt/conf/waptserver.ini

Code: Select all

[options]
ldap_auth_server = srvads.mydomain.lan
ldap_auth_base_dn = DC=mydomain,DC=lan
ldap_account_service_login = wapt-ldap@mydomain.lan
ldap_account_service_password = password


What is often forgotten is to add ldap_account_service_login and ldap_account_service_password
Without this, the server can authenticate the user correctly but cannot know which groups they belong to

Re: Kerberos and Selfservice

Published: May 5, 2022 - 2:07 PM
by Renaud Villet
OK great, it works.
Thank you!

Re: [SOLVED] Kerberos and Selfservice

Published: May 5, 2022 - 5:50 PM
by smandel
Hello,

I've applied the configuration correctly, but nothing is happening either.
Authentication works for agents trying to connect to the server.
Where can I view the logs?

Thank you.

Re: [SOLVED] Kerberos and Selfservice

Published: May 5, 2022 - 5:56 PM
by smandel
Everything is fine after adding:

Code: Select all

ldap_auth_ssl_enabled = False
THANKS !