Stack Overflow
Stack Overflow

Questions tagged [mod-auth-kerb]

Mod_auth_kerb is an Apache module designed to provide Kerberos authentication to the Apache web server.

Mod_auth_kerb is an Apache module designed to provide Kerberos authentication to the Apache web server. Using the Basic Auth mechanism, it retrieves a username/password pair from the browser and checks them against a Kerberos server as set up by your particular organization. The module also supports the Negotiate authentication method, which performs full Kerberos authentication based on ticket exchanges, and does not require users to insert their passwords to the browser. In order to use the Negotiate method you need a browser supporting it (currently standard IE6.0 or Mozilla with the negotiateauth extension).

The module supports both kerberos4 and kerberos5 protocols for password verification. The Negotiate mechanism can be only used with Kerberos v5. The module supports both 1.x and 2.x versions of Apache.

21 questions
6
votes
0 answers

mod_auth_kerb.so: undefined symbol: ap_log_error

I have 3-node cluster, On first node i have installed my service in kerberos enabled mode. For load-balancer, on second node i have installed httpd 2.2.15 version, apr 1.5.2 and apr-util 1.5.4 and "./configure" , make, make install command was…
ni3
  • 485
  • 4
  • 20
3
votes
0 answers

Apache Kerberos token error

Im trying to setup a simple file directory share on my apache, which is kerberized to handle KDC tickets, I am getting these errors in my Apacche error log when I try to access the shared files via Chrome browser on my workstation, Fri Dec 08…
perfecto25
  • 772
  • 9
  • 13
1
vote
0 answers

SSO with mod_auth_kerb at windows for apache 2.4 or other possibilities

need some help here. how do I configure/compile mod_auth_kerb at windows for apache 2.4? The information I googled tends to show configuration on linux instead of windows. I found the team schaeuffelhut-berger who sells modul…
ekinek
  • 97
  • 1
  • 9
1
vote
1 answer

How do i pass the authenticated user from apache kerberos to tomcat GET reques

I'm using Kerberos Mod with apache to authenticate windows user on our intranet sites which are hosted on Ubuntu servers. The backend that gets the data is tomcat. the site in question make a GET request to https://siteName/user/logMeIn . When I try…
Gruneich3
  • 31
  • 4
1
vote
0 answers

Extract Apache environment variable "REMOTE_USER" works only with SSL

We are using Apache with mod_auth_kerb to authenticate our users configured in an Active Directory. While trying to extract REMOTE_USER from the Environment Variables I observed something strange - I was able to retrieve the user when SSL is enabled…
Harman
  • 751
  • 1
  • 9
  • 31
1
vote
1 answer

Apache2 mod_rewrite remote user variable to lowercase

i'm using the mod_auth_kerb module for kerberos authentication in apache. Usernames have the format "User.Name" like here: [authz_core:error] AH01631: user User.Name: authorization failure for "/site/": I need the full Username in lowercase. The…
Phillip
  • 35
  • 1
  • 7
1
vote
1 answer

Unable to impersonate user when authenticated using auth_kerb listener

I am trying to set up switch_user functionality on an application which authenticates using Apache's auth_kerb. REMOTE_USER is returned correctly and am able to log in. However when I try to masquerade as a different user I am unable to. The user I…
boombana
  • 11
  • 3
1
vote
4 answers

Apache, mod_auth_kerb, mod_proxy: Get authenticated user in Go Web Application

I'm using Apache as reverse proxy for things like authentication in front of the go http server. The following apache kerberos setup works with one problem. I don't know how to get the authenticated username in my go…
Ulrich Anhalt
  • 172
  • 2
  • 11
1
vote
0 answers

Setting KRB5_CONFIG is thread safe?

I need to set the path of krb5.conf in my code. Please Let me know which is thread safe ? Method 1: Set the Environment variable like setenv("KRB5_CONFIG" ,"/etc/krb5.conf",1); Method 2:(I am not sure whether this will set the krb5.conf file…
user3345390
  • 421
  • 2
  • 6
  • 14
1
vote
0 answers

apache mod_auth_kerb binarys for win32

I wanna try to use Apache HTTP Server on Windows with mod_auth_kerb. But I faced to a problem that I cant find it. I tryed to google it but I can only see the discussion of the difficulties when trying to compile it. Is subj exists? Where I can…
Vladimir Kravets
  • 330
  • 6
  • 21
1
vote
1 answer

Apache mod_auth_kerb

I have a setup using apache and mod_auth_kerb to authenticate users and proxy them to the destination web server using a HTTP header with username (X-Remote-User). How do i setup a proper logout mechanism from the destination web server? - URL to…
Rasmus Melgaard
  • 96
  • 1
  • 8
1
vote
1 answer

gss_display_name() failed: A required input parameter could not be read: An invalid name was supplied (, Unknown error)

I'm trying to setup Kerberos authentication on Apache 2.2.15-30 (CentOs 6.5), and am facing an issue that I'm not able to debug or solve. I can see the TGS request in the KDC log and Firefox sends the correct Authorization: Negotiate header, but…
user3801448
  • 11
  • 3
0
votes
0 answers

Kerberos SSO with Apache and Zammad not working

I want to introduce the ticket system Zammad with SSO, but after days of configuration it's not working. The LDAP source is Active Directory. I installed it on Debian 12 and switched from Nginx to Apache as described in the SSO tutorial from…
Christof
  • 1
0
votes
0 answers

Can a keytab file be generated for more than one application on the same domain?

I have implemented kerberos Single Sign On authentication on one web application. In order to do that I generated a keytab file in the Active Directory for this specific app (ex: app1.domain.com). If I want to implement SSO auth in another app in…
ee11131
  • 51
  • 1
  • 6
0
votes
0 answers

Apache Reverse Proxy Kerberos

I have a working internal Apache server configured with mod_auth_kerb. I also have an external Apache server that proxies connections to the internal. When users connect internally with their domain accounts, SSO using kerberose works. When…
TurboAAA
  • 27
  • 1
  • 10
1
2