The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
35 views

How can I use LDAP and Kerberos for web auth only, not server auth

I have read this question on proper kerberos integration and this question on enterprise authentication, neither are helpful to me at this point in time though they did provide some good background. ...
1
vote
1answer
27 views

Apache - Replace Apache::AuthenNTLM with Kerberos (mod_auth_kerb)

Within an intranet system on Solaris we currently use perls Apache2::AuthenNTLM module to authenticate with a Win 2k3 doman server, so we can access the user ID of the person browsing the site. ...
0
votes
2answers
192 views

apache2.2 with mod_auth_kerb SSO: how to fallback to same directory when user can't authenticate

i implement an intranet CMS (Joomla 2.5) in a multidomain environment, logging them in with kerberos against Windows AD -> SSO. SSO with kerberos works perfect for the integrated domains, also the SSO ...
0
votes
1answer
227 views

Add custom headers to HTTP 401 responses from Kerberos mod_auth_kerb

I'm using Apache with mod_auth_kerb to perform HTTP authentication. How do I add custom headers to the 401 Authorization Required response generated by the auth module? The relevant sections of my ...
1
vote
1answer
2k views

mod_auth_kerberos “Unspecified GSS failure”

I did an apache 2.4 fresh install. I'd like to use kerberos authentication. I compiled and install mod_auth_kerb modules. here is my config <location "/restriced/"> SSLRequireSSL AuthName ...
0
votes
2answers
458 views

LDAP Auth proxy adding headers according to LDAP groups

I'm trying to setup some WebSSO mechanisms, that allow my customer to authenticate people against internal Active Directory and then add secure (https) headers containing credential information. ...
0
votes
1answer
295 views

proxypass and mod_auth_kerb

We have a web application that is protected with mod_auth_kerb. This application works fine inside the LAN. Now we would like to give access to users outside of the LAN to this application. Is there ...
0
votes
1answer
301 views

Authentication through mod_auth_kerb should provide website with no user if no TGT provided

Users are authenticated by mod_auth_kerb which works great. Therefore I need to set Require valid-user If there is no valid user Apache fails with an 401 Authorization Required. I would like ...
0
votes
2answers
512 views

apache using mod_auth_kerb always asks for the password twice

(Debian Squeeze) I'm trying to set apache up to use Kerberos authentication to allow AD users to log in. It is working, but prompts the user twice for a username and password, with the first time ...
1
vote
1answer
983 views

Apache2 + mod_auth_kerb: Key version number for principal in key table is incorrect

I have configured apache2 and mod_auth_kerb. I setted up my .htaccess in such way # cat .htaccess AuthType Kerberos AuthName "Domain login" KrbAuthRealms DOMAIN.COM KrbMethodK5Passwd on Krb5KeyTab ...
5
votes
4answers
7k views

Apache Bad Request “Size of a request header field exceeds server limit” with Kerberos SSO

I'm setting up an SSO for Active Directory users through a website that runs on an Apache (Apache2 on SLES 11.1), and when testing with Firefox it all works fine. But when I try to open the website in ...
0
votes
2answers
4k views

Apache2, Kerberos: gss_accept_sec_context() failed: An unsupported mechanism was requested

I want to use Kerberos and Apache 2 on linux with mod_auth_kerb. I added .htaccess to my project with following: #SSLRequireSSL AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On ...
8
votes
1answer
2k views

How to tell mod_auth_kerb to do its job despite no “require valid-user”

I implemented a SSO authentication using mod_auth_kerb on Apache. My config looks like this: <Location /login/ > AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on ...
2
votes
2answers
1k views

Linking Linux MIT Kerberos with a Windows 2003 Active Directory

Greetings, I was wondering how one might link a Linux MIT Kerberos with a Windows 2003 Active Directory to achieve the following: A user, USER@WINDOWDIRECTORY.INTERNAL, attempts to log in at an ...