Pages

#11

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by b126 - February 07, 2024, 09:50:41 AM

It is pure NTLM. No Kerberos. We never got Kerberos authentication working on Windows.

OK thanks for the info... in that case I can stop trying to get Kerberos working with the SSPI module

But at the end, should I use mod_authnz_sspi or rather mod_auth_ntml which seems to be 1 year newer?
I've already set up mod_authnz_sspi with no problems on my configuration (only the VirtualHost bothers me, but nothing serious) but I can change for NTML if needed.
Is there any difference behind?

#12

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by mario - February 07, 2024, 09:10:51 AM

Security Support Provider Interface (SSPI). SSPI is the implementation of the Generic Security Services API (GSSAPI) in Windows Server operating systems. For more information about GSSAPI, see the IETF RFC database in RFC 2743 and RFC 2744.

It is pure NTLM. No Kerberos. We never got Kerberos authentication working on Windows.

A working vhost example

Code Select Expand

<VirtualHost *:80>
  ServerName some.domain.com
  DocumentRoot "/some/path/local"
  <Directory "/some/path/local">
    Options my-options
    AllowOverride AuthConfig my-other-overrides
#   Require all granted
    <IfModule authnz_sspi_module>
      AuthName "SSPI Protected Place"
      AuthType SSPI
      SSPIAuth On
      SSPIAuthoritative On
      SSPIOfferBasic On
      # Should you need to force the login prompt, uncomment the next line
      # SSPIBasicPreferred On
      SSPIOfferSSPI On
      SSPIOmitDomain On
      <RequireAll>
        <RequireAny>
          Require valid-sspi-user
#         Require valid-user
        </RequireAny>
        <RequireNone>
          Require user "ANONYMOUS LOGON"
        </RequireNone>
      </RequireAll>
    </IfModule>
  </Directory>
</VirtualHost>

#13

Third-party Modules / Re: SSO Mod windows Where to f...

Last post by b126 - February 06, 2024, 07:19:49 PM

The other

Thank you Gregg for this great module. It's working perfectly... until I move my app under a Virtual Host. It seems SSPI is not working with virtual hosts (not trusted).

Could you please then tell me if this problem is occuring with the NTLM module as well.

And what is the main difference between the "SSPI" and the "SSPI NTLM based" modules?
SSPI is able do it in Kerberos as well (if no NTLM work) and the "SSPI NTLM based" one is only pure NTLM?

Thank you again.

#14

Webmaster Tools, Tips and Tricks / Re: How to get traffic

Last post by mario - January 29, 2024, 10:14:08 AM

You need to set links from other web pages to your webpage.

#15

Webmaster Tools, Tips and Tricks / How to get traffic

Last post by smithloo - January 29, 2024, 04:54:26 AM

I spend more than six months , but no traffic came to my website. I don't know what I have sone mistake. I followed seo and social book marking sites too. Can any one help me.

#16

Webmaster Tools, Tips and Tricks / Re: Speed Up Sites with htacce...

Last post by smithloo - January 29, 2024, 04:48:42 AM

a great post
thanks for sharing
read it to learn more about speeding up website

#17

Apache 2.4 / Re: Connecting to PostgreSQL: ...

Last post by mario - January 18, 2024, 10:37:41 AM

Why not? It baffles me. Apache on windows offers only ODBC when everyone recommends not to use ODBC as its slower

Because is are only a very few windows maintainers for windows. And those don't / didn't set their focus on PostgreSQL. Sadly I can't reach Gregg. He was the only one who was able to build it.

#18

Apache 2.4 / Re: Apache 2.4.59 release date

Last post by mario - January 18, 2024, 10:31:35 AM

We never did any Linux builds.

However there is no fix date when 2.4.59 will come out.

#19

Apache 2.4 / Apache 2.4.59 release date

Last post by Manikandan V - January 18, 2024, 08:06:43 AM

Hi All,
       Can you please share the Apache 2.4.59 release date for Linux & Windows.

Thanks,
Mani

#20

Apache 2.4 / Re: mod_session sends duplicat...

Last post by kimbo - January 12, 2024, 10:40:13 PM

A most basic configuration to reproduce the issue

Code Select Expand

ServerRoot "C:/Apache24"
Listen 80

LoadModule access_compat_module modules/mod_access_compat.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule dbd_module modules/mod_dbd.so
LoadModule session_module modules/mod_session.so
LoadModule session_dbd_module modules/mod_session_dbd.so
LoadModule dir_module modules/mod_dir.so

<Directory />
    AllowOverride none
    Require all denied
</Directory>

DBDriver odbc
DBDParams "odbc_connection_string"
DBDKeep     10
DBDMax      10
DBDMin      3

DBDPrepareSQL "select value from sessions where token = %s and (expiry = 0 or expiry > %lld)" selectsession
DBDPrepareSQL "delete from sessions where token = %s" deletesession
DBDPrepareSQL "insert into sessions (value, expiry, token) values (%s, %lld, %s)" insertsession
DBDPrepareSQL "update sessions set value = %s, expiry =  %lld, token = %s where token = %s" updatesession
DBDPrepareSQL "delete from sessions where expiry != 0 and expiry < %lld" cleansession

DocumentRoot "C:/Apache24/htdocs"
<Directory "C:/Apache24/htdocs">
    Require all granted
    Session On
    SessionDBDCookieName test path=/
    SessionMaxAge 604800
    SessionEnv on
    SessionHeader X-Replace-Session
</Directory>


<IfModule dir_module>
    DirectoryIndex index.html
</IfModule>