Questions tagged [mod-auth-kerb]

Mod_auth_kerb is an Apache module designed to provide Kerberos authentication to the Apache web server.

Mod_auth_kerb is an Apache module designed to provide Kerberos authentication to the Apache web server. Using the Basic Auth mechanism, it retrieves a username/password pair from the browser and checks them against a Kerberos server as set up by your particular organization. The module also supports the Negotiate authentication method, which performs full Kerberos authentication based on ticket exchanges, and does not require users to insert their passwords to the browser. In order to use the Negotiate method you need a browser supporting it (currently standard IE6.0 or Mozilla with the negotiateauth extension).

The module supports both kerberos4 and kerberos5 protocols for password verification. The Negotiate mechanism can be only used with Kerberos v5. The module supports both 1.x and 2.x versions of Apache.

21 questions
0
votes
0 answers

Apache Kerberos Auth file fallback

I've set up a Kerberos Authentication on my Apache Server (Ubuntu 16.04 LTS) with mod_auth_kerb. The configuration is as follows : AuthType Kerberos AuthName "Authentication Required" KrbAuthRealm MY.DOMAIN Krb5KeyTab…
DrySaucisse
  • 53
  • 1
  • 7
0
votes
0 answers

Getting SPNEGO work with Apache (Authetication Service/Proxy) <-> apache-weblogic bridge (mod_wl) <-> weblogic(Application Server)

I have very limited knowledge on mod_auth_keb or SPNEGO protocols, Yet we are looking to implement the below approach for gaining Single-signon access(Against Microsoft AD with NT domain users authorization) to a number of applications that are…
0
votes
1 answer

Apache (2.4) RequireAny with REQUEST_URI

I've been trying to get this working and don't know where it's going wrong. In the apache config I have the following section: AuthType Kerberos AuthName "Login" KrbMethodNegotiate on KrbMethodK5Passwd on …
Nico
  • 559
  • 4
  • 22
0
votes
1 answer

Why I'm getting 'No credentials cache found' on SSO using pyKerberos (authGSSClientStep)?

I use SLES11 with a Python2.6 and Apache Web-Application. I have a Active Directory Server with Kerberos and I want to use SSO with my Application. I already created a service principal HTTP/host.example.org in domain EXAMPLE.ORG. This user is…
0
votes
1 answer

How to login into Web App with kerberos/AD but still allow access to non AD users

I'm deploying a SSO in Apache webserver against an Active Directory via kerberos (mod_auth_kerb). The module is installed and configured correctly, when I access apache websites with a logged in user to AD network, Apache receives correctly user's…
Packet Tracer
  • 3,884
  • 4
  • 26
  • 36
0
votes
1 answer

Mod_auth_kerb: optional Kerberos Negotiation

Can I configure Mod_auth_kerb (http://modauthkerb.sourceforge.net/configure.html) in the way it will perform optional Kerberos Negotiation: If browser is configured to negotiate Mod_auth_kerb will perform negotiation and will authenticate a user…
Michael
  • 10,063
  • 18
  • 65
  • 104
1
2