-sh-4.1$ kinit Password for aaa@FUNFURT.DE: -sh-4.1$ klist Ticket cache: FILE:/tmp/krb5cc_1838600003 Default principal: aaa@FUNFURT.DE Valid starting Expires Service principal 04/14/16 11:38:47 04/15/16 11:38:42 krbtgt/FUNFURT.DE@FUNFURT.DE -sh-4.1$ curl -v --negotiate -u : -X GET -H "Accept: application/xml" -k https://server8.funfurt.de/api/vms * About to connect() to server8.funfurt.de port 443 (#0) * Trying 192.168.100.108... connected * Connected to server8.funfurt.de (192.168.100.108) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * warning: ignoring value of ssl.verifyhost * skipping SSL peer certificate verification * SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA * Server certificate: * subject: CN=server8.funfurt.de,O=funfurt.de,C=US * start date: Apr 05 21:42:46 2016 GMT * expire date: Mar 11 21:42:46 2021 GMT * common name: server8.funfurt.de * issuer: CN=server8.funfurt.de.90408,O=funfurt.de,C=US > GET /api/vms HTTP/1.1 > User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.19.1 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2 > Host: server8.funfurt.de > Accept: application/xml > < HTTP/1.1 401 Authorization Required < Date: Thu, 14 Apr 2016 09:39:00 GMT < WWW-Authenticate: Negotiate < WWW-Authenticate: Basic realm="Kerberos Login" < Vary: Accept-Encoding < Content-Length: 486 < Connection: close < Content-Type: text/html; charset=iso-8859-1 < * Closing connection #0 * Issue another request to this URL: 'https://server8.funfurt.de/api/vms' * About to connect() to server8.funfurt.de port 443 (#0) * Trying 192.168.100.108... connected * Connected to server8.funfurt.de (192.168.100.108) port 443 (#0) * warning: ignoring value of ssl.verifyhost * skipping SSL peer certificate verification * SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA * Server certificate: * subject: CN=server8.funfurt.de,O=funfurt.de,C=US * start date: Apr 05 21:42:46 2016 GMT * expire date: Mar 11 21:42:46 2021 GMT * common name: server8.funfurt.de * issuer: CN=server8.funfurt.de.90408,O=funfurt.de,C=US * Server auth using GSS-Negotiate with user '' > GET /api/vms HTTP/1.1 > Authorization: Negotiate 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 > User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.19.1 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2 > Host: server8.funfurt.de > Accept: application/xml > < HTTP/1.1 401 Unauthorized < Date: Thu, 14 Apr 2016 09:39:48 GMT < WWW-Authenticate: Basic realm="ENGINE" < Content-Type: text/html;charset=UTF-8 < Content-Length: 71 < Vary: Accept-Encoding < Connection: close < * Closing connection #0 ErrorUnauthorized-sh-4.1$ -sh-4.1$ klist Ticket cache: FILE:/tmp/krb5cc_1838600003 Default principal: aaa@FUNFURT.DE Valid starting Expires Service principal 04/14/16 11:38:47 04/15/16 11:38:42 krbtgt/FUNFURT.DE@FUNFURT.DE 04/14/16 11:39:01 04/15/16 11:38:42 HTTP/server8.funfurt.de@FUNFURT.DE