LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 10-26-2017, 08:20 PM   #1
yakkmeister
Member
 
Registered: Jan 2005
Location: QLD Australia
Distribution: Debian 10 'Buster'
Posts: 78

Rep: Reputation: 16
proxy to translate basic auth to authenticate against Active Directory?


Hello!

I have been developing a small process automation program on a linux box which is intended to run bulk processes against a web interface.
That interface has been moved from servers using NTLM authentication to using the "windows" authentication; Active Directory.

Any time the authorisation popup appears on my linux machine, I have to intervene manually - this is not acceptable as my application needs to pass through credentials (via a https interface) and no human should be looking at those. The software (selenium, firefox and phantomjs) cannot handle these popups and, so, I must work around the problem.

I had this solved earlier by use of a local proxy server that acted as an intermediary or translation proxy - I gave it plain creds, it used them for NTLM negotiations.
But then the servers were changed ... :/

What I need is a workaround to this problem.
Some points to consider:
- My machine is running Centos7
- Internet access is not possible
- I cannot use full AD integration (this is outside my power)
- I have SUDO privileges but we also have a local, static repo
- I can add almost anything to python via PyPI and manually installing
- I can compile and install from source on this machine
- All users of this program must be authorised on the AD
- They may not be local users of the machine (access via https)
- The program must use the provided credentials
- Kerberos is already installed, tested and working
- This project is written entirely in python 2.7
- I prefer a solution that is either transparent to the program or part of it

I won't be able to share much in the way of config or code due to the nature of my employer, but I'll answer whatever I can.

Any help would be greatly apprecaited

Last edited by yakkmeister; 10-26-2017 at 11:08 PM. Reason: Spelling
 
Old 12-07-2017, 01:36 AM   #2
yakkmeister
Member
 
Registered: Jan 2005
Location: QLD Australia
Distribution: Debian 10 'Buster'
Posts: 78

Original Poster
Rep: Reputation: 16
This is the solution to my specific problem.

https://stackoverflow.com/questions/...tive-directory
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Problem to authenticate on a Active Directory Bindestreck Slackware 6 03-06-2012 10:02 AM
RHEL Authenticate to Active Directory wilslm Red Hat 5 05-02-2011 11:59 PM
squid proxy authenticate with active directory. inaki Linux - Server 2 07-10-2009 02:11 AM
Getting Samba to authenticate against Active Directory lqkums Linux - Newbie 2 02-19-2009 07:33 AM
Does anyone here authenticate against Active Directory? humbletech99 Linux - Security 6 04-25-2008 10:49 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 10:15 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration