[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-26 Thread Aleksey Maksimov
Thank You, Jan. It works. I wrote about my experience setting up SSSD with Apache in blog: https://blog.it-kb.ru/2016/10/26/configuring-basic-and-kerberos-authentication-with-sso-single-sign-on-for-the-apache-web-server-using-sssd-and-pam-service-for-authorization/

[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-20 Thread Jan Pazdziora
On Thu, Oct 20, 2016 at 05:17:25PM +0200, Michael Ströder wrote: > Jan Pazdziora wrote: > > More information about this setup (though not talking about AD > > specifically) can be found at > > > > https://www.freeipa.org/page/Web_App_Authentication > > Are there any modules already setting th

[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-20 Thread Michael Ströder
Jan Pazdziora wrote: > More information about this setup (though not talking about AD > specifically) can be found at > > https://www.freeipa.org/page/Web_App_Authentication Are there any modules already setting the env vars proposed here: https://www.freeipa.org/page/Environment_Variables

[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-20 Thread Jan Pazdziora
On Thu, Oct 20, 2016 at 11:14:10AM -, Aleksey Maksimov wrote: > Hello SSSD guru`s! > > Is there anyone have such experience? > There may be some recommendations or instructions? With the use of mod_authnz_pam https://www.adelton.com/apache/mod_authnz_pam/ and Require pam-account pam

[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-20 Thread Aleksey Maksimov
Where can I learn about these tricks? ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-20 Thread Aleksey Maksimov
Just curious to try. No chance for SSSD in this matter ? :) ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-20 Thread Ondrej Valousek
Just use mod_auth_kerb or (better) mod_auth_gssapi In terms of authentication, SSSD is not really needed here... -Original Message- From: Aleksey Maksimov [mailto:aleksey.maksi...@it-kb.ru] Sent: Thursday, October 20, 2016 1:14 PM To: sssd-users@lists.fedorahosted.org Subject: [SSSD-users

[SSSD-users] Re: Apache web server and Active Directory domain authorization with SSSD (with SSO)

2016-10-20 Thread Jakub Hrozek
On Thu, Oct 20, 2016 at 11:14:10AM -, Aleksey Maksimov wrote: > Hello SSSD guru`s! > > Is there anyone have such experience? > There may be some recommendations or instructions? Jan (CC) might have some tricks up his sleeve.. ___ sssd-users mailing