Displaying 4 results from an estimated 4 matches for "krblocalusermap".
2017 Apr 04
1
Apache2 Kerberos-Authentication and LDAP-Authorization
...other two guides,
except that the user http-servername gets a known password instead of a
random.
<Directory "/login.html">
AuthType Kerberos
AuthName "Network Login"
KrbMethodNegotiate On
KrbMethodK5Passwd On
KrbAuthRealms X.Y
Krb5KeyTab /etc/apache2/apache.keytab
KrbLocalUserMapping On
AuthLDAPGroupAttribute member
AuthLDAPGroupAttributeIsDn On
# Adding cn and displayName is optional, but provides the value
# as environment variables to the script
# e.g.: AUTHORIZE_DISPLAYNAME="John Doe"
AuthLDAPURL
ldaps://{ad-server}/CN=Users,DC=X,DC=Y?sAMAccountName,cn...
2018 Feb 05
0
mod_auth_kerb realm not stripped
...ctives to httpd.conf results in access being denied. Using ldapsearch
with GSSAPI (or password entry) works as expected.
After looking at debug logs and tcpdump output, I (possibly incorrectly) put
the issue down to being unsure how to get krb5_aname_to_localname to function
appropriately with the KrbLocalUserMapping directive of apache's
mod_auth_kerb.
It does do some transformation, converting to lowercase. However the realm
part is not stripped off. Example output from apache error_log:
[Thu Jan 25 11:53:33.969841 2018] [auth_kerb:debug] [pid 2176]
src/mod_auth_kerb.c(1855): [client 192.168...
2015 Aug 05
5
LDAP bindpw password
Hi.
I'm using Samba 4 on two Zentyal servers as Domain Controller and now
I have to authenticate some services to it (Apache and PAM in
particular).
The LDAP integration asks me for a LDAP bind password, but I cannot
find out where it is on Zentyal.
Is there a way to check (or change it) directly on Samba 4?
Or is it preferable to authenticate against Active Directory or Kerberos?
Thank you
2015 May 11
6
Authenticating Apache Against Active Directory
Hello,
Using Nagios on Ubuntu 14.04.1 LTS. I'm attempting to authenticate
users against Samba 4.2.1. When I edit 'apache2.conf' with
<Directory />
Options FollowSymLinks
AllowOverride None
Require all granted
Allow from all
AuthName "AD authentication"
AuthBasicProvider ldap
AuthType Basic