Geek Answers Handbook

Kerberos user authentication in Apache

can anyone recommend some really good resources on how to get Apache to authenticate users with Kerberos.

Kerberos background reading will also be useful

thanks

Peter

+5
source share
4 answers

mod_auth_kerb is a good start: http://modauthkerb.sourceforge.net/ . If you need Active Directory support, see here: http://support.microsoft.com/?id=555092 .

+4
source

mod_auth_spnego , SSPI Windows , MIT Kerberos. mod_spnego

+1

Active Directory KDC: http://oslabs.mikro-net.com/krb_apache.html

+1

apache Kerberos:

http://www.roguelynn.com/words/apache-kerberos-for-django/

( , )

EDIT:

apache Kerberos.

, Kerberos .

1) - keytab [1].

, - keytab!

2) httpd- - mod_auth_kerb:

LoadModule auth_kerb_module modules/mod_auth_kerb.so

3) apache Kerberos:

<Location /> 
    AuthName "Kerberos Authentication -- this will be showed to users via BasicAuth"
    AuthType Kerberos
    KrbMethodNegotiate On
    KrbMethodK5Passwd Off
    # this is the principal from your keytab (you may lose the FQDN part)
    KrbServiceName HTTP/$FQDN
    KrbAuthRealms KERBEROS_DOMAIN
    Krb5KeyTab /path/to/http.keytab
    Require valid-user

    Order Deny,Allow
    Deny from all
</Location>

Then apache will pass the user to your application through an REMOTE_USERHTTP header.

What is it.

I also advise you to enable debug logging in apache during installation. Make sure you have the right time, and httpd can read keytab, that's all.

[1] http://kb.iu.edu/data/aumh.html

[2] Main resource: http://www.roguelynn.com/words/apache-kerberos-for-django/

+1
source

More articles:


All Articles