KrbUsernameLowercase
Brought to you by:
kouril
Menu
▾
▴
#33 KrbUsernameLowercase
This patch adds the directive KrbUsernameLowercase which defaults to off. If set to on it will translate the username to lowercase. This patch is useful on systems which authenticate against Active Directory's implementation of kerberos as AD does not enforce case sensitivity in a user's prinicipal.
Example:
AD account john exists and is stored in active directory as lowercase. This user may end up with a ticket that contains the principal JOHN@REALM. mod_auth_kerb will authenticate the user correctly but if apache is using the directive 'Require user john' authorization fails since REMOTE_USER is set by mod_auth_kerb as JOHN. This patch would set REMOTE_USER to john and thus satisfy the apache directive for ' Require user john'.
It has many other applications as well but this is the easiest to setup for proof of concept.
KrbUsernameLowercase.patch