LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices



Reply
 
Search this Thread
Old 09-10-2008, 11:11 AM   #1
climbingmerlin
Member
 
Registered: Mar 2004
Location: UK
Distribution: Fedora, OpenSuse
Posts: 91

Rep: Reputation: 15
Apache and Kerberos SSO issues


Hi,

I am trying to set up a linux server running apache2 and mod_auth_kerb to authenticate users against our Windows 2003 AD server.

I have got the server to authenticate with AD using kerberos, however this is only possible with the authentication dialog box appearing. I can't seem to have the users authenticate seamlessly i.e. without the dialog box.

I would prefer to use krb rather than LDAP as we have users in different OUs for each business group.

Here is the contents of the .htaccess file

Code:
AuthName "Intranet"
AuthType Kerberos
Krb5Keytab /usr/lib/krb5/auth_kerb.keytab
KrbAuthRealm UK.MYDOMAIN.COM
KrbMethodNegotiate off
KrbSaveCredentials off
KrbVerifyKDC off
Require valid-user
Any ideas how I can get users to authenticate against the server without the dialog box?

Cheers....
 
Old 08-06-2009, 11:11 AM   #2
San-Raal
LQ Newbie
 
Registered: Apr 2008
Distribution: debian, redhat el4
Posts: 18

Rep: Reputation: 0
You have set
Code:
KrbMethodNegotiate off
which actually is the "without dialog box" option.

Recommend using
Code:
KrbMethodNegotiate On
KrbMethodK5Passwd Off
This disables the dialog box, and enables only the GSSAPI authentication.

I really recommended using
Code:
LogLevel Debug
ErrorLog /var/log/apache2/error.log
in your httpd.conf/apache2.conf/virtual hosts file, and check your apache error logs, while trying to authenticate without the dialog box.
 
Old 08-09-2009, 06:12 AM   #3
chandramani_yadav
Member
 
Registered: Jan 2007
Location: Vienna
Distribution: Redhat
Posts: 47

Rep: Reputation: 19
Refer this link for alternate method

http://linuxpower.ismywebsite.com/we...in-apache.html
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
apache and kerberos zerocool22 Linux - Server 1 08-06-2009 10:53 AM
LXer: How To Set Up Apache, Tomcat (mod_jk), SSO (CAS, mod_auth_cas) LXer Syndicated Linux News 0 08-25-2008 11:40 AM
Authz_ldap? I need to have SSO with kerberos against a AD domain mujzeptu Linux - Server 6 02-07-2008 11:53 AM
SBS2003 domain, Fedora C3 client, kerberos authentication issues Spida Linux - Networking 0 11-23-2005 11:07 PM
Q: apache and kerberos roger.wernersso Mandriva 1 07-20-2004 11:42 AM


All times are GMT -5. The time now is 09:58 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration