D'oh! Why didn't I ask here sooner

1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User

Welcome to IWETHEY!

Post #158,799 by drewk 6/7/04 11:09:13 AM Reply	D'oh! Why didn't I ask here sooner We've got a RedHat/Apache webserver. Our users are W2K/XP on an XP domain. We want to use Kerberos to authenticate users on the webserver. Wait, too specific, assumes the solution. What we want is for our users, who have already signed on to the Windows domain, to be recognized by the webserver without having to log in to it. This should be easy, but I don't know enough sysadmining to have the right pointers. Good HOWTOs anywhere? === Implicitly condoning stupidity since 2001.
Post #158,866 by folkert 6/7/04 4:54:15 PM Reply	Well, best as I can tell... Might be suffcient to go against the domain libapache-authensmb - SMB authentication module for Apache/mod_perl or you could stack up pam and use winbind to do the ticket checking. libapache-mod-auth-pam - Authenticate web access using PAM winbind - service to resolve user and group information from Windows NT servers Or even just make pam check the ticket directly libpam-heimdal - PAM module for Heimdal Kerberos 5 libpam-krb5 - PAM module for MIT Kerberos Or just have apache do the kerberos thing itself libapache-mod-auth-kerb - Apache module for Kerberos authentication -- [link\|mailto:greg@gregfolkert.net\|greg], [link\|http://www.iwethey.org/ed_curry\|REMEMBER ED CURRY!] @ *i_wethey* I've decided to become a perfectionist. That way I'll have more reasons to hate people. Your recycled electrons annoy me. Please use new electrons.
Post #158,871 by drewk 6/7/04 5:45:00 PM Reply	Would authsmb work without samba on the webserver? As to the rest, I'll talk to our sudo-sysadmin. === Implicitly condoning stupidity since 2001.
Post #158,885 by folkert 6/7/04 6:49:16 PM Reply	sudo or pseudo? -- [link\|mailto:greg@gregfolkert.net\|greg], [link\|http://www.iwethey.org/ed_curry\|REMEMBER ED CURRY!] @ *i_wethey* I've decided to become a perfectionist. That way I'll have more reasons to hate people. Your recycled electrons annoy me. Please use new electrons.
Post #158,918 by drewk 6/7/04 10:17:19 PM Reply	pseudo He's officially a programmer, but admins the webserver because all our official sysadmins are windows-only. === Implicitly condoning stupidity since 2001.
Post #158,980 by folkert 6/8/04 10:43:54 AM Reply	So, still having those problems... Of convincing your Boss to let me remotely manage them? Oh well. -- [link\|mailto:greg@gregfolkert.net\|greg], [link\|http://www.iwethey.org/ed_curry\|REMEMBER ED CURRY!] @ *i_wethey* I've decided to become a perfectionist. That way I'll have more reasons to hate people. Your recycled electrons annoy me. Please use new electrons.

D'oh! Why didn't I ask here sooner - (drewk) - (5) - June 7, 2004, 11:09:13 AM EDT

Well, best as I can tell... - (folkert) - (4) - June 7, 2004, 04:54:15 PM EDT

Would authsmb work without samba on the webserver? - (drewk) - (3) - June 7, 2004, 05:45:00 PM EDT

sudo or pseudo? -NT - (folkert) - (2) - June 7, 2004, 06:49:16 PM EDT

pseudo - (drewk) - (1) - June 7, 2004, 10:17:19 PM EDT

So, still having those problems... - (folkert) - June 8, 2004, 10:43:54 AM EDT

iwethey.org

That's right subspace ponies! I'm makin' gravy without the lumps!
91 ms