I'm currently trying to set up Apache as an authentication portal. It's supposed to act as a reverse proxy with krb authentication.
My apache server is named portal.example.com (debian container) My IPA server is named freeipa.example.com (centos container)
Here's my current Apache configuration on portal.example.com:
< Location /> AuthType Kerberos AuthName "Login on test domain" KrbAuthRealm TEST.COM Krb5Keytab /etc/apache2/portal.keytab KrbMethodNegotiate on KrbMethodK5Passwd off KrbServiceName HTTP/portal.example.com@TEST.COM require valid-user < /Location>
I can't get it working as I want: I don't want it to ask users to enter their password, so I configured firefox in order to let it negotiate the authentication but I always get a 401/Unauthorized. However, if I set KrbMethodK5Passwd to on, and then login with my krb username and password, then I get a 200 http response. Any idea about how to do it without asking for credentials? :(