Menu

#27 Better integration with Apache 2.2

open-accepted
None
5
2013-08-23
2009-04-27
No

Apache 2.2 made a separation with auhentication and authorization.
When used as a basic authentication back end, mod_kerberos should be less intrusive for a better integration with ehanced functionnality of this new separation.
This patch plug mod_auth_kerb as a AUTHN_PROVIDER_GROUP fo the name kerberos.
To use it, add this in the configuration file :
AuthBasicAuthoritative On
AuthBasicProvider kerberos

With this, all the new features of apache 2.2 can be used (like AuthnProviderAlias)

The KrbAuthoritative directive become useless.

I copied the function authenticate_user_krb5pwd to authenticate_user_krb5pwd22, but both could be merged with special care.

Discussion

  • Fabrice Bacchella

     
  • Matej Pristak

    Matej Pristak - 2009-04-27

    You are right, I'll merge these changes into the current Basic provider implementation in mod_auth_kerb after some tests.
    Thanks.

     
  • Matej Pristak

    Matej Pristak - 2009-04-27
    • assigned_to: nobody --> baalberith
     
  • Matej Pristak

    Matej Pristak - 2009-05-05

    I' ve tweaked our Basic provider support according to your code, please take a look at it in CVS. Thanks

     
  • Matej Pristak

    Matej Pristak - 2009-05-05
    • status: open --> open-accepted
     
  • Joachim Thuau

    Joachim Thuau - 2013-08-23

    with the patch posted (not the CVS content), the KrbLocalUserMapping doesn't appear to have any effect.
    I will be testing the CVS version and report.

     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.