Re: Kerberos Authentication via Apache

2005-01-13 Thread Achim Grolms
In comp.protocols.kerberos Scott Moseman <[EMAIL PROTECTED]> wrote: >> mod_auth_kerb can do SPNEGO. >> >> Find my tutorial "using mod_auth_kerb and Windows 2000 as KDC" >> at >> > > Thanks, Achim, you indirectly helped me solved my problem. > All your steps are

Re: Kerberos Authentication via Apache

2005-01-13 Thread Scott Moseman
Achim Grolms wrote: > > > >> The website authenticates against the Windows domain. > >> But it uses a pop-up box for the login authentication. > >> I'm under the impression that it should use Kerberos > >> tickets and get my domain login info without the need > >> to request it from me. I have see

Re: Kerberos Authentication via Apache

2005-01-13 Thread Achim Grolms
In comp.protocols.kerberos Russ Allbery <[EMAIL PROTECTED]> wrote: > In comp.infosystems.www.servers.unix, scmoseman <[EMAIL PROTECTED]> writes: > >> The website authenticates against the Windows domain. >> But it uses a pop-up box for the login authentication. >> I'm under the impression that it

Re: Kerberos Authentication via Apache

2005-01-11 Thread Nikola Milutinovic
Luis Daniel Lucio Quiroz wrote: MOD_KRB5 or whatever you are using just auth agains krb db without ticket support. Read documentation. Instead of that you could use mod_auth_ntlm, it works in a single-sign-on mode. mod_auth_krb5 can use BOTH clinet (accept HTTP-Auth BASIC and run like a kini

Re: Kerberos Authentication via Apache

2005-01-11 Thread Russ Allbery
In comp.infosystems.www.servers.unix, scmoseman <[EMAIL PROTECTED]> writes: > The website authenticates against the Windows domain. > But it uses a pop-up box for the login authentication. > I'm under the impression that it should use Kerberos > tickets and get my domain login info without the nee

Re: Kerberos Authentication via Apache

2005-01-11 Thread Luis Daniel Lucio Quiroz
MOD_KRB5 or whatever you are using just auth agains krb db without ticket support. Read documentation. Instead of that you could use mod_auth_ntlm, it works in a single-sign-on mode. regards LD On Tue, 11 Jan 2005 [EMAIL PROTECTED] wrote: > > Re: RHEL 3, Krb5 1.3.3, Apache 2.0, and mod_aut

Kerberos Authentication via Apache

2005-01-11 Thread scmoseman
Re: RHEL 3, Krb5 1.3.3, Apache 2.0, and mod_auth_kerb. The server has joined the Windows domain, no problems. The Kerberos tickets are setup for Apache, works good. Here's an example of an .htaccess file for a website: AuthType Kerberos AuthName "MYDOMAIN" KrbMethodNegotiate on KrbAuthoritative