When Kerberos Authenticates Users but Can’t Tell You Who They Are

Kerberos authentication worked. Apache accepted the ticket. The backend received the request. And yet, the application had no idea which user was calling it, or which groups they belonged to. This post documents how I built a Kerberos-authenticated A...