Apache authentication: NTLM Single Signon: Difference between revisions
No edit summary |
No edit summary |
||
| Line 15: | Line 15: | ||
NTLMauth on | NTLMauth on | ||
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" | NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" | ||
Require user <user | Require user <users> | ||
</pre> | |||
Ensure that all users requiring authentication are added to the last line. | |||
Alternatively, allow all valid users who are members of the winbind domain with the following: | |||
<pre>AuthType NTLM | |||
NTLMauth on | |||
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -require-membership-of="WORKGROUP\Domain Users"" | |||
Require valid user | |||
</pre> | </pre> | ||
Restart apache and test: | Restart apache and test: | ||
Revision as of 17:52, 7 December 2018
NTLM single sign on under Apache
Note: This guide assumes you have Samba configured and connected to a Windows domain
Install needed packages:
# apk add apache2 apache-mod-auth-ntlm-winbind
Add apache user to winbind group:
# addgroup <user> winbind
add to httpd.conf (virtual host):
AuthType NTLM NTLMauth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" Require user <users>
Ensure that all users requiring authentication are added to the last line.
Alternatively, allow all valid users who are members of the winbind domain with the following:
AuthType NTLM NTLMauth on NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp -require-membership-of="WORKGROUP\Domain Users"" Require valid user
Restart apache and test:
# rc-service apache stop && rc-service apache start