kerberos authentication for apache on windows

[Klavs Klavsen]

Hi Julien,

I have it working with the modgssapache module - although I'm not sure
that apache module works on anything but Unix (I've used it on FreeBSD
without problems).

The nice thing about it, is that it supports single-sign-on - as I
understand it, mod_auth_kerb does not.

on 06/02/05 12:48 Julien ALLANOS wrote:
> Hello,
> 
> I'm new to kerberos, and I want to know if the following configuration is
> possible:
> 
> I have an Apache2 web server running on Windows 2003 Server, and I want to
> authenticate users with kerberos before they can access to the web server
> content. The kdc service seems to be up and running on the Windows 2003 server.
> 
> 1/ how can I check that a client (Windows XP) that has just logged into the
> domain, has been given a TGT?
> 
> Now I have to "kerberize" the Apache server. I found mod_auth_krb
> (http://modauthkerb.sourceforge.net/). To compile it for Windows, I need
> headers and libs for a Kerberos implementation.
> 
> 2/ Can I use Windows implementation to compile it? Or do I have to install
> another Kerberos implementation (such as MIT for Windows 2.6.5) in order to
> build it?
> 
> 3/ How can I be sure only Kerberos is used (and not NTLM)?
> 
> Thanks for any information.

-- 
Regards,
Klavs Klavsen, GSEC - kl at vsen.dk - http://www.vsen.dk
PGP: 7E063C62/2873 188C 968E 600D D8F8  B8DA 3D3A 0B79 7E06 3C62

"Those who do not understand Unix are condemned to reinvent it, poorly."
  --Henry Spencer