Kerberos and LDAP

Kerberos and LDAP

by Albert Ramsbottom -
Number of replies: 4

hi

 

I am using Moodle 2.2 and have installed Mod_Auth_Kerb on our apache server and our win admin has configured the keytab file and has sent it ti me for testing

I can join the CentOs box with the windows domain using Kinit username@domain and when I Klist this, i have a ticket

But SSO doesnt work. I think I might have configured Apache wrong. I have the following at the bottom of my /etc/httpd/conf/httpd.conf file:

<Directory /var/www/html/moodle/auth/ldap/>
<Files ntlmsso_magic.php>
AuthName "Moodle"
AuthType Kerberos
KrbAuthRealms PROD.MY.DOMAIN
KrbServiceName HTTP
Krb5Keytab /etc/httpd/my.keytab
KrbMethodNegotiate on
KrbMethodK5Passwd on
KrbAuthoritative on
require valid-user
</Files>
</Directory>

My KRB5.conf works as I have a ticket when I run klist

 

Any ideas about the apache conf, could i move this to my htaccess file?

Cheers

Albert

Average of ratings: -
In reply to Albert Ramsbottom

Re: Kerberos and LDAP

by Albert Ramsbottom -

OK

 

I have kerberos working and my access and error logs confirm this and how if i navigate directly to the auth/ldap/ntlmsso_attempt it works just fine

Great!

The olny thing a need help on now is the apache http.conf as I dont seem to be able to get kerberos working using the directive above.  I just land on the home page and dont get SSO until i navigate to the above file.

any ideas on this?

I done exactly what was stated on the ntlm moodle docs page

Cheers

Paul

Average of ratings: -
In reply to Albert Ramsbottom

Re: Kerberos and LDAP

by Albert Ramsbottom -

Done Done

 

Many thanks

Average of ratings: -
In reply to Albert Ramsbottom

Re: Kerberos and LDAP

by Krzysztof Witkowski -

Hello Albert,

My problem is similar. How did you fix it ?

Thanks for advance

Average of ratings: -
In reply to Krzysztof Witkowski

Re: Kerberos and LDAP

by Andy McGill -

Hi Krzysztof,

I'm also facing the same problem, did you get a reply from Albert? Or did you manage to solve it?

Many thanks,
Andy

Average of ratings: -