bonjour, j'ai modifié le fichier hosts, pour que ce soit la bonne IPsfonteneau a écrit : ↑02 juil. 2026 - 16:44 il n'y a pas 192.168.1.11 dans /etc/hosts ? (mauvaise conf)
là le kinit essaie de se connecter a 192.168.1.11 ...
j'ai relancé les commandes sur le serveur linux :
Code : Tout sélectionner
root@SRV-WAPT:/etc# kdestroy
root@SRV-WAPT:/etc# kinit <user>
Password for <user>@<domaine>:
root@SRV-WAPT:/etc# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: <user>@<domaine>
Valid starting Expires Service principal
07/03/2026 08:53:28 07/03/2026 18:53:28 krbtgt/<domaine>@<domaine>
renew until 07/04/2026 08:53:22
root@SRV-WAPT:/etc# curl -v --negotiate -u : https://<domaine>/api/v3/add_host_kerberos -k
* Host srv-wapt.<domaine>:443 was resolved.
* IPv6: (none)
* IPv4: 192.168.1.10
* Trying 192.168.1.10:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Request CERT (13):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
* subject: CN=srv-wapt.<domaine> 20240805-1439
* start date: Aug 5 12:39:30 2024 GMT
* expire date: Aug 3 12:39:30 2034 GMT
* issuer: CN=srv-wapt.<domaine>
* SSL certificate verify result: self-signed certificate in certificate chain (19), continuing anyway.
* Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
* Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
* Connected to srv-wapt.<domaine> (192.168.1.10) port 443
* using HTTP/1.x
* gss_init_sec_context() failed: Server not found in Kerberos database.
* Server auth using Negotiate with user ''
> GET /api/v3/add_host_kerberos HTTP/1.1
> Host: srv-wapt.<domaine>.fr
> User-Agent: curl/8.14.1
> Accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* Request completely sent off
< HTTP/1.1 401 Unauthorized
< Server: nginx
< Date: Fri, 03 Jul 2026 06:53:26 GMT
< Content-Type: text/html
< Content-Length: 172
< Connection: keep-alive
* gss_init_sec_context() failed: Server not found in Kerberos database.
< WWW-Authenticate: Negotiate
< Strict-Transport-Security: max-age=63072000
<
<html>
<head><title>401 Authorization Required</title></head>
<body>
<center><h1>401 Authorization Required</h1></center>
<hr><center>nginx</center>
</body>
</html>
* Connection #0 to host srv-<domaine> left intact
)