[Klug-general] Apache single sign on with windows

Karl Buckland buckland.karl at googlemail.com
Thu Sep 30 12:44:59 UTC 2010


You would need to use NTLM to make it seamless in Internet Explorer
(and Firefox, once you change some hidden settings).

Karl

On 30 September 2010 13:42, Daniel Ellis <mail at danellis.co.uk> wrote:
> My subversion box authenticates with AD.  But it isn't seamless, both
> Firefox and IE prompt for the domain credentials to be entered.  I
> didn't figure out how to make it seamless, but I guess it is due to me
> using Basic Authentication as follows:
>
> AuthName "Enter your domain username and password"
> AuthType Basic
> AuthBasicProvider ldap
> AuthLDAPBindDN "CN=X,OU=-- System Accounts,OU=X,DC=X,DC=X"
> AuthLDAPBindPassword "X"
> AuthLDAPURL "ldap://X:389/ou=X,dc=X,dc=X?samAccountName?"
> AuthLDAPGroupAttributeIsDN on
> require ldap-group CN=Software Development,OU=-- Security
> Groups,OU=XX,DC=XX,DC=XX
>
> Do you have the authentication with AD working already?  Is it just
> the seamless bit you are after now?
>
> Dan Ellis
>
> On 30 September 2010 13:28, Dan Attwood <danattwood at gmail.com> wrote:
>> does anyone have any experience with single sign and apache. I want to be
>> able to seamlessly sign in from Internet Explorer into an protected area of
>> a website - running apache on a windows box and authenticaing against a
>> windows domain. And yes I know that's a lot windows for a Linux list  but
>> such is life sometimes.
>> _______________________________________________
>> Kent mailing list
>> Kent at mailman.lug.org.uk
>> https://mailman.lug.org.uk/mailman/listinfo/kent
>>
>
> _______________________________________________
> Kent mailing list
> Kent at mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/kent
>



More information about the Kent mailing list