Tagged Questions

0
votes
0answers
11 views

Kerberos with AuthnProviderAlias

I was configuring some AuthnProviderAliases today and I want to add kerberos to it. The problem is that when I added kerberos apache wouldn't restart and I got the following error in my syslog: ...
0
votes
1answer
174 views

Problems set-up Single Sign-On using Kerberos authentication

I need for Ruby on Rail application set authentication via Active Directory using Kerberos authentication. Some technical information: I are using Apache installed mod_auth_kerb In httpd.conf I ...
1
vote
1answer
293 views

SSO with Apache and Kerberos issues

I am trying to set up SSO on my Apache web server using Kerberos so that users logged into the local domain are recognised and logged in immediately. I have followed this guide to the letter but I ...
1
vote
0answers
96 views

Mixing Redmine and custom authentication method in a single apache virtualhost for Redmine

I developed on Redmine a plugin to automatically log users using the REMOTE_USER given by Apache when its Kerberos ticket is accepted. This plugin works as long as the user has a corporate login, but ...
0
votes
1answer
122 views

proxypass and mod_auth_kerb

We have a web application that is protected with mod_auth_kerb. This application works fine inside the LAN. Now we would like to give access to users outside of the LAN to this application. Is there ...
0
votes
1answer
124 views

Authentication through mod_auth_kerb should provide website with no user if no TGT provided

Users are authenticated by mod_auth_kerb which works great. Therefore I need to set Require valid-user If there is no valid user Apache fails with an 401 Authorization Required. I would like ...
0
votes
0answers
345 views

Apache Kerberos/LDAP: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

(Debian Squeeze) I have Apache authenticating via Kerberos - that works fine. Now I want to restrict the site to a single group only, so I need to add LDAP authorization. I enabled authnz_ldap and ...
0
votes
1answer
268 views

apache using mod_auth_kerb always asks for the password twice

(Debian Squeeze) I'm trying to set apache up to use Kerberos authentication to allow AD users to log in. It is working, but prompts the user twice for a username and password, with the first time ...
1
vote
2answers
871 views

Integrated Windows Authentication with Apache HTTP Server on Linux

What is the best way to enable Integrated Windows Authentication for a PHP web application running on Apache2/Linux? There is a Windows Domain Controller in the network which should be used for ...
1
vote
2answers
556 views

Apache: how to set custom 401 error page and save original behaviour

I have Kerberos-based authentication with Apache/2.2.3 (Linux/SUSE). When user is trying to open some url, browser ask him about domain login and password like in HTTP Basic Auth. If user cancel such ...
1
vote
3answers
805 views

How can I disable Kerberos authentication for only the root of my site?

I have Kerberos-based authentication and I want to disable it on only root url: http://mysite.com/. And I want it to continue to work fine on any other page like http://mysite.com/page1. I have such ...
1
vote
1answer
247 views

libapache2-mod-auth-kerb: access to / failed, reason: user 'd_inevitable' does not meet 'require'ments for user/valid-user to be allowed access

I am not sure if this is down to libapache2-mod-auth-kerb, apache2-mpm-itk or apache2 in general. The error message itself is very cryptic: access to / failed, reason: user 'd_inevitable' ...
0
votes
1answer
595 views

Apache Kerberos Authentication with LDAP Authorization: access to / failed, reason: require directives present and no Authoritative handler

I am trying to get a VirtualHost (well multiple VirutalHosts) up and running with kerberos authentication and group requirements. My latest configuration within the <Directory> directive looks ...
0
votes
2answers
2k views

Apache2, Kerberos: gss_accept_sec_context() failed: An unsupported mechanism was requested

I want to use Kerberos and Apache 2 on linux with mod_auth_kerb. I added .htaccess to my project with following: #SSLRequireSSL AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On ...
4
votes
1answer
698 views

Google Chrome and kerberos authentication against Apache

I've managed to get kerberos authentication to work now with Apache and Likewise Open but so far, Google Chrome doesn't seem to play fair. Unless I start it with chrome.exe ...
0
votes
2answers
134 views

Kerberos unknown code krb 147, failed to verify krb5 credentials with LikeWise Open

I've followed this guide to get Apache Single-Sign-On to work, but so far all I get is strange kerberos errors. ...
2
votes
1answer
258 views

Many HTTP 401's with Kerberos authentication via mod_auth_kerb

I've got an Apache2 httpd running in front of a Tomcat, doing authentication via mod_auth_kerb. When I open the console in Firebug, I see lots of 401's (see screenshot: ...
1
vote
0answers
287 views

Kerberos high availability failover, Apache Mod_auth_kerb, Using the Kerberos slave is slow

We host our own Redmine rails web application internally with Apache using Mod_auth_kerb and our internal Kerberos for authentication. We have 2 internal Kerberos servers KDC1 and KDC2. KDC1 is ...
1
vote
1answer
369 views

Custom 401 error page served by Apache for firefox by not IE Kerberos Authorization by group

My Custom 401 error page gets served by Apache for firefox by not IE. I'm using Kerberos authentication and ldap group Authorization. Basically if a user is not in the proper group I'd like the 401 ...
0
votes
1answer
393 views

Kerberos authentication not working for one single domain

We have a strange problem regarding Kerberos authentication with Apache mod_auth_kerb. We use a very simple krb5.conf, where only a single (main) AD server is configured. There are many domains in the ...
2
votes
1answer
2k views

Fallback authentication if mod_auth_kerb fails

Is there a way for Apache to fall back to a different authentication method if Kerberos authentication (for some reason) fails? The order of the authentication methods should be: Kerberos Active ...
6
votes
1answer
1k views

How to tell mod_auth_kerb to do its job despite no “require valid-user”

I implemented a SSO authentication using mod_auth_kerb on Apache. My config looks like this: <Location /login/ > AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on ...
1
vote
3answers
3k views

.htaccess requires password in chrome but not other browsers?

We have .htaccess on our site http://subdomain.site.com/: AuthType Kerberos AuthName "Internet ID" require valid-user order deny,allow deny from all allow from all On a sub directory of the ...
1
vote
1answer
461 views

Internet explorer rejects cookies in kerberos protected intranet sites

I'm trying to build an intranet site using joomla. The webserver is using HTTP Kerberos authentication with mod_kerb_auth. Everything works fine, the users get authenticated and so on. But if i try to ...
3
votes
1answer
1k views

Single Sign On for intranet with Apache and Linux MIT Kerberos

EDIT: SOLVED! See my answer below. Greetings, I am looking for a way to do a single sign on to an intranet in the following manner: A Linux user logs on via a graphical frontend (for example, ...
2
votes
2answers
1k views

Linking Linux MIT Kerberos with a Windows 2003 Active Directory

Greetings, I was wondering how one might link a Linux MIT Kerberos with a Windows 2003 Active Directory to achieve the following: A user, USER@WINDOWDIRECTORY.INTERNAL, attempts to log in at an ...
1
vote
1answer
734 views

Apache2 + mod_auth_kerb + active directory will not authenticate group permissions

I have an apache2 server setup under ubuntu to authenticate against an Active Directory Domain Controller. It works fine with an .htaccess file in the folder I want to protect with a line like ...
1
vote
2answers
1k views

How to setup apache redirect or custom 401 document on Kerberos SSO login failure

I have a working Kerberos SSO setup, I use apache and jboss with mod_jk. Apache is protecting (by kerberos) the auto-login.htm page with the following configuration: <Location /auto-login.htm> ...
2
votes
2answers
842 views

Apache mod_auth_kerb asking 2 authentication

I've configured Apache to use mod_auth_kerberos. So far everything is working nicely for client thats connected to Active Directory and have their browser to ntlm enabled. When clients are not in the ...
0
votes
1answer
473 views

Compiling mod_auth_kerb on OS X

I'm trying to get mod_auth_kerb installed, but I can't seem to find any information on compiling it on OS X. I'm getting the following when I attempt to compile: ./apxs.sh "-I. -Ispnegokrb5 ...
2
votes
3answers
2k views

apache poor performance with Kerberos Authentication

I have an apache instance that uses kerberos for SSO with an internal application that we have running. However the performance is very very poor. I believe from a tcp dump that when a user hits ...
6
votes
1answer
4k views

Seamless SSO with Kerberos, IE, Firefox, LDAP Active Directory

Alias /students /var/www/students <Location /students> KrbServiceName HTTP KrbMethodNegotiate On KrbMethodK5Passwd On KrbSaveCredentials off KrbAuthRealms DOMAIN.LOCAL Krb5KeyTab ...
1
vote
2answers
3k views

Apache SSO with Active Directory and providing authorization based on groups

I'm using rhel5 running a LAMP stack to create an intranet with. I'm attempting to achieve SSO with users on our network using IE and Firefox. Using the following module I'm able to successfully do ...
5
votes
3answers
4k views

Apache mod_auth_kerb and LDAP user groups

I've been considering deploying mod_auth_kerb on our internal web servers to enable SSO. The one obvious problem I can see is that it's an all-or-nothing approach, either all your domain users can ...