Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [mod-auth-kerb]

20 questions
11
votes
4 answers

Apache Bad Request "Size of a request header field exceeds server limit" with Kerberos SSO

I'm setting up an SSO for Active Directory users through a website that runs on an Apache (Apache2 on SLES 11.1), and when testing with Firefox it all works fine. But when I try to open the website in Internet Explorer 8 (Windows 7), all I get is…
Aurelin
  • 329
  • 2
  • 4
  • 10
11
votes
1 answer

How to tell mod_auth_kerb to do its job despite no "require valid-user"

I implemented a SSO authentication using mod_auth_kerb on Apache. My config looks like this: AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate on KrbAuthoritative on KrbVerifyKDC on …
Benjamin Wohlwend
  • 729
  • 2
  • 7
  • 14
4
votes
3 answers

Apache2, Kerberos: gss_accept_sec_context() failed: An unsupported mechanism was requested

I want to use Kerberos and Apache 2 on linux with mod_auth_kerb. I added .htaccess to my project with following: #SSLRequireSSL AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbAuthRealms…
petRUShka
  • 293
  • 1
  • 5
  • 16
3
votes
1 answer

Use Kerberos ticket to access WebDAV

Using Apache's mod_dav as the server, Samba 4.1.17 as the server and any version of Windows from 7 upwards as the client how can I mount a WebDAV share using Kerberos for the authentication? Currently I have WebDAV and Kerberos confirmed working…
Flexo
  • 588
  • 9
  • 23
3
votes
1 answer

Apache2 + mod_auth_kerb: Key version number for principal in key table is incorrect

I have configured apache2 and mod_auth_kerb. I setted up my .htaccess in such way # cat .htaccess AuthType Kerberos AuthName "Domain login" KrbAuthRealms DOMAIN.COM KrbMethodK5Passwd on Krb5KeyTab /etc/httpd/httpd.keytab require valid-user When I…
petRUShka
  • 293
  • 1
  • 5
  • 16
2
votes
2 answers

How to avoid frequent KVNO increases, when using Apache HTTPD with mod_auth_kerb talking to AD?

I've setup Apache HTTPD 2.4 with mod_auth_kerb, created a service account on Active Directory, added a SPN for my http hostname, created a keytab file on the linux machine, and had SSO start working nicely for users logged into the AD domain from…
Gagravarr
  • 747
  • 3
  • 7
  • 21
2
votes
1 answer

Apache - Replace Apache::AuthenNTLM with Kerberos (mod_auth_kerb)

Within an intranet system on Solaris we currently use perls Apache2::AuthenNTLM module to authenticate with a Win 2k3 doman server, so we can access the user ID of the person browsing the site. Moving to Win 2012 AD servers, we're told this won't…
Dr.Avalanche
  • 133
  • 1
  • 1
  • 13
2
votes
1 answer

mod_auth_kerberos "Unspecified GSS failure"

I did an apache 2.4 fresh install. I'd like to use kerberos authentication. I compiled and install mod_auth_kerb modules. here is my config SSLRequireSSL AuthName "Kerberos login" AuthType Kerberos KrbMethodNegotiate…
ampy
  • 21
  • 1
  • 1
  • 2
2
votes
2 answers

Linking Linux MIT Kerberos with a Windows 2003 Active Directory

Greetings, I was wondering how one might link a Linux MIT Kerberos with a Windows 2003 Active Directory to achieve the following: A user, USER@WINDOWDIRECTORY.INTERNAL, attempts to log in at an Apache website, which runs on the same server as the…
Beerdude26
  • 101
  • 1
  • 7
1
vote
1 answer

Apache reverse proxy not passing custom headers to the target server

I am not sure if this is the right place to ask this kind of question but in the same time I don't know any better place, so please bear with me. I have configured Apache as reverse proxy to my PostGraphile service. My idea is to use Apache to do…
Greg0ry
  • 87
  • 1
  • 12
1
vote
1 answer

mod_auth_kerb keytab file for a different FQDN

I have an Active Directory domain that resembles 'AD.EXAMPLE.COM'. I've installed an Apache server that has an FQDN that is slightly different from my AD Domain name: 'apache.example.com' (without the AD). I'm trying to configure a Kerberos…
nadavr
  • 11
  • 1
1
vote
1 answer

Add custom headers to HTTP 401 responses from Kerberos mod_auth_kerb

I'm using Apache with mod_auth_kerb to perform HTTP authentication. How do I add custom headers to the 401 Authorization Required response generated by the auth module? The relevant sections of my Apache configuration are below. My custom header is…
quietmint
  • 207
  • 2
  • 10
1
vote
3 answers

LDAP Auth proxy adding headers according to LDAP groups

I'm trying to setup some WebSSO mechanisms, that allow my customer to authenticate people against internal Active Directory and then add secure (https) headers containing credential information. Version 1 OK : authenticate and adding headers The…
Jean-Rémy Revy
  • 159
  • 2
  • 14
0
votes
1 answer

Kerberos Apache keeps asking for BASIC

After struggling for a very long time with kerberos authentication on my website, I am finally coming to you because I am lost. I am currently creating a classic PHP website and I want to include a seamless authentication by using kerberos. So here…
B. Clerc
  • 3
  • 1
  • 3
0
votes
1 answer

Apache not finding the kerberos principal in keytab file

Virtual host has been configured with these options; AuthType Kerberos AuthName "Kerberos Login" KrbMethodNegotiate On KrbMethodK5Passwd Off KrbAuthRealms EXAMPLE.COM KrbAuthoritative On KrbServiceName…
Morten Nilsen
  • 278
  • 5
  • 15
1
2