We have a web application that is protected with mod_auth_kerb. This application works fine inside the LAN.
Now we would like to give access to users outside of the LAN to this application. Is there some reverse proxy that asks the user for a username and a password in a nice html form, sets a cookie in the users browser to remember his username/password combination, creates a spnego token to send to the backend application?
Can this be done with apache as reverse proxy and proxypass somehow? What we would need is something like mod_auth_kerb_proxy.
[user] -> [reverse proxy] (authenticates user with an html form requesting domain username/password) -> spnego/kerberos protected backend application