Apache authentication: NTLM Single Signon

From Alpine Linux
Revision as of 21:30, 20 October 2010 by Jbilyk (talk | contribs) (Updated since this has been packaged)

NTLM single sign on under Apache
Install needed packages (you will need both the main and testing repositories from edge):

apache2
apache-mod-auth-ntlm-winbind
samba (joined to a Windows Domain) with winbind running


add to httpd.conf (virtual host):

AuthType NTLM
NTLMauth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
Require user jbilyk

Don't forget to customize the final line with the username(s) that you wish to limit usage to. Alternatively, make the final line "Require valid user" and change the helper line to inlude something like "-require-membership-of="WORKGROUP\Domain Users"".
Restart apache and test