Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-13 Thread Markus Moeller
angiroff, Matthias (KC-DD) Betreff: Re: AW: AW: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap? Then it should work. Kerberos requires the userPrincipalName and not their "windowsusername" (aka sAMAccountName). Or am I missing something? Mike PS: I recommend steering

Re: AW: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-10 Thread Michael B Allen
On Tue, 10 Oct 2006 08:40:55 +0200 "Djihangiroff, Matthias (KC-DD)" <[EMAIL PROTECTED]> wrote: > But it doesnt work. > If they type in their user PrincipalName, i get an entry in my error log. > (Specified realm `persona.de' not allowed by configuration) > > > get a ticket for [EMAIL PROTECTED]

AW: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-09 Thread Djihangiroff, Matthias (KC-DD)
d = 0 try_first_pass = true } -Ursprüngliche Nachricht- Von: Michael B Allen [mailto:[EMAIL PROTECTED] Gesendet: Montag, 9. Oktober 2006 18:16 An: Djihangiroff, Matthias (KC-DD) Betreff: Re: AW: AW: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap? Then it should

Re: WG: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-06 Thread Enrico M. V. Fasanelli
Djihangiroff, Matthias (KC-DD) wrote: Yes exactly. I cannot use mod_auth_kerb, because some Users are NOT in the AD. So they must get a Login, where they can type in their Windowslogin (e.g [EMAIL PROTECTED]). I cannot use the "integrated windows authetification" to auth against the mod_auth_k

WG: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Djihangiroff, Matthias (KC-DD)
Yes exactly. I cannot use mod_auth_kerb, because some Users are NOT in the AD. So they must get a Login, where they can type in their Windowslogin (e.g [EMAIL PROTECTED]). I cannot use the "integrated windows authetification" to auth against the mod_auth_kerb. Im trying the new apache 2.2.x. I he

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Evan Vittitow
I had this problem a few days ago. Divide up your clients by IP Range. Put your Kerberized clients on one subnet, non-Kerberized clients on another subnet. Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/k

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Russ Allbery
Michael B Allen <[EMAIL PROTECTED]> writes: > Russ Allbery <[EMAIL PROTECTED]> wrote: >> It only does Kerberos authentication. If the passwords are stored as >> encrypted hashes in an LDAP directory server (which is what people >> normally mean when they talk about "LDAP authentication"), it does

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Michael B Allen
On Thu, 05 Oct 2006 11:10:27 -0700 Russ Allbery <[EMAIL PROTECTED]> wrote: > Michael B Allen <[EMAIL PROTECTED]> writes: > > Russ Allbery <[EMAIL PROTECTED]> wrote: > > >> mod_auth_kerb can (via BasicAuth), but you need to have the passwords > >> in some Kerberos database. It doesn't help if the

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Russ Allbery
Michael B Allen <[EMAIL PROTECTED]> writes: > Russ Allbery <[EMAIL PROTECTED]> wrote: >> mod_auth_kerb can (via BasicAuth), but you need to have the passwords >> in some Kerberos database. It doesn't help if they're only in LDAP. > I'm a little confused by this statement. If mod_auth_kerb uses >

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Michael B Allen
On Thu, 05 Oct 2006 10:13:53 -0700 Russ Allbery <[EMAIL PROTECTED]> wrote: > Michael B Allen <[EMAIL PROTECTED]> writes: > > "Djihangiroff, Matthias (KC-DD)" <[EMAIL PROTECTED]> wrote: > > >> Anyone out there whos running an Apache with mod_auth_kerb and > >> mod_auth_ldap? > >> Im running an Apa

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Russ Allbery
Michael B Allen <[EMAIL PROTECTED]> writes: > "Djihangiroff, Matthias (KC-DD)" <[EMAIL PROTECTED]> wrote: >> Anyone out there whos running an Apache with mod_auth_kerb and >> mod_auth_ldap? >> Im running an Apache with mod_auth_kerb perfectly. >> But we have users, which arent in our Windows AD,

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Michael B Allen
On Thu, 5 Oct 2006 08:03:51 +0200 "Djihangiroff, Matthias (KC-DD)" <[EMAIL PROTECTED]> wrote: > Hello, > > Anyone out there whos running an Apache with mod_auth_kerb and > mod_auth_ldap? > Im running an Apache with mod_auth_kerb perfectly. > > But we have users, which arent in our Windows AD, so

Re: Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-05 Thread Russ Allbery
"Djihangiroff, Matthias (KC-DD)" <[EMAIL PROTECTED]> writes: > Anyone out there whos running an Apache with mod_auth_kerb and > mod_auth_ldap? Im running an Apache with mod_auth_kerb perfectly. > But we have users, which arent in our Windows AD, so they cant load the > websites protected through

Anyone has an apache running with mod_auth_kerb AND mod_auth_ldap?

2006-10-04 Thread Djihangiroff, Matthias (KC-DD)
Hello, Anyone out there whos running an Apache with mod_auth_kerb and mod_auth_ldap? Im running an Apache with mod_auth_kerb perfectly. But we have users, which arent in our Windows AD, so they cant load the websites protected through mod_auth_kerb. Is it possible to fall back to mod_auth_ldap, s