Pages

#1

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by oytoch - February 14, 2024, 09:14:04 PM

It's not a criticism but a questioning. I'm not qualified to do it, but I wonder about it. Even if few people need it, it's still an important safety feature.

If i find something (one day) , I will come back here.

#2

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by mario - February 14, 2024, 08:52:00 AM

But, Why ? Windows can make kerberos auth (IIS) . Some Java web server too. (with a keytab)

I dont understand what is the problem to support this feature for windows

if you know how to feel free to contribute to httpd Apache it is Open Source.

#3

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by oytoch - February 13, 2024, 09:54:49 PM

It is pure NTLM. No Kerberos. We never got Kerberos authentication working on Windows.

 

But, Why ? Windows can make kerberos auth (IIS) . Some Java web server too. (with a keytab)

I dont understand what is the problem to support this feature for windows

#4

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by mario - February 07, 2024, 03:15:21 PM

For Apache 2.4 you have to use mod_authn_ntlm in this case. There is https://github.com/TQsoft-GmbH/mod_authn_ntlm with good documentation.
newer binaries than on GitHub can be found on our download page https://www.apachehaus.com/cgi-bin/download.plx

#5

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by b126 - February 07, 2024, 09:50:41 AM

It is pure NTLM. No Kerberos. We never got Kerberos authentication working on Windows.

OK thanks for the info... in that case I can stop trying to get Kerberos working with the SSPI module

But at the end, should I use mod_authnz_sspi or rather mod_auth_ntml which seems to be 1 year newer?
I've already set up mod_authnz_sspi with no problems on my configuration (only the VirtualHost bothers me, but nothing serious) but I can change for NTML if needed.
Is there any difference behind?

#6

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by mario - February 07, 2024, 09:10:51 AM

Security Support Provider Interface (SSPI). SSPI is the implementation of the Generic Security Services API (GSSAPI) in Windows Server operating systems. For more information about GSSAPI, see the IETF RFC database in RFC 2743 and RFC 2744.

It is pure NTLM. No Kerberos. We never got Kerberos authentication working on Windows.

A working vhost example

Code Select Expand

<VirtualHost *:80>
  ServerName some.domain.com
  DocumentRoot "/some/path/local"
  <Directory "/some/path/local">
    Options my-options
    AllowOverride AuthConfig my-other-overrides
#   Require all granted
    <IfModule authnz_sspi_module>
      AuthName "SSPI Protected Place"
      AuthType SSPI
      SSPIAuth On
      SSPIAuthoritative On
      SSPIOfferBasic On
      # Should you need to force the login prompt, uncomment the next line
      # SSPIBasicPreferred On
      SSPIOfferSSPI On
      SSPIOmitDomain On
      <RequireAll>
        <RequireAny>
          Require valid-sspi-user
#         Require valid-user
        </RequireAny>
        <RequireNone>
          Require user "ANONYMOUS LOGON"
        </RequireNone>
      </RequireAll>
    </IfModule>
  </Directory>
</VirtualHost>

#7

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by b126 - February 06, 2024, 07:19:49 PM

The other

Thank you Gregg for this great module. It's working perfectly... until I move my app under a Virtual Host. It seems SSPI is not working with virtual hosts (not trusted).

Could you please then tell me if this problem is occuring with the NTLM module as well.

And what is the main difference between the "SSPI" and the "SSPI NTLM based" modules?
SSPI is able do it in Kerberos as well (if no NTLM work) and the "SSPI NTLM based" one is only pure NTLM?

Thank you again.

#8

Webmaster Tools, Tips and Tricks / Re: How to get traffic

Last post by mario - January 29, 2024, 10:14:08 AM

You need to set links from other web pages to your webpage.

#9

Webmaster Tools, Tips and Tricks / How to get traffic

Last post by smithloo - January 29, 2024, 04:54:26 AM

I spend more than six months , but no traffic came to my website. I don't know what I have sone mistake. I followed seo and social book marking sites too. Can any one help me.

#10

Webmaster Tools, Tips and Tricks / Re: Speed Up Sites with htacce...

Last post by smithloo - January 29, 2024, 04:48:42 AM

a great post
thanks for sharing
read it to learn more about speeding up website