Test using curl from a windows client
Use curl to call token2 endpoint with windows authentication
curl -v --negotiate -u : http://dpenano3.davidsystems-test.com/DpeWebApplication/api/token2
DpeNanoServices console warnings
DpeNanoServices[0] Environment variable to Kerberos keytab file KRB5_KTNAME is not set.
-
Reason: KRB5_KTNAME environment variable is not set
DpeNanoServices[0] Kerberos keytab file '/var/www/_app.keytab' is missing.
-
Reason: Kerberos keytab file is missing or access permissions are not sufficient
Errors in token2 response and their probable cause
System.InvalidOperationException: The AuthorizationPolicy named: 'RequireKerberos' was not found.
-
Status code 401 (Unauthorized)
-
Reason: appsettings.json “EnableNegotiate” is false
Windows user ws@DAVID-GMBH.DE could not be mapped to a DigaSystem user (authType=Kerberos)
-
Status code 401 (Unauthorized)
-
Reason: Kerberos is working correctly but the client user is not AD-synced
Browser shows logon dialog
Windows authentication is at least partly configured and tried but the client is not able to send a valid Kerberos ticket.
Possible reasons:
-
setspn for machine and user running DpeNanoServices is missing or wrong
-
Browser is not configured to automatically send Kerberos tickets for the DpeNanoServices
-
…