Apache authentication: NTLM Single Signon: Difference between revisions

Revision as of 21:30, 20 October 2010

NTLM single sign on under Apache
Install needed packages (you will need both the main and testing repositories from edge):

apache2

apache-mod-auth-ntlm-winbind

samba (joined to a Windows Domain) with winbind running

add to httpd.conf (virtual host):

AuthType NTLM

NTLMauth on

NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"

Require user jbilyk

Don't forget to customize the final line with the username(s) that you wish to limit usage to. Alternatively, make the final line "Require valid user" and change the helper line to inlude something like "-require-membership-of="WORKGROUP\Domain Users"".
Restart apache and test

@@ Line 1: / Line 1: @@
 NTLM single sign on under Apache<br />
-Prereqs:<br />
+Install needed packages (you will need both the main and testing repositories from edge):<br />
-From http://samba.org/ftp/unpacked/lorikeet/mod_auth_ntlm_winbind/, download the following files:<br />
+  apache2<br />
- mod_auth_ntlm_winbind.c<br />
+  apache-mod-auth-ntlm-winbind<br />
- configure.in<br />
- Makefile.in<br />
-<br />
-Install needed packages:<br />
-  autoconf<br />
- alpine-sdk<br />
-  apache-dev<br />
- apr-util-dev<br />
- apr-dev<br />
- apache<br />
   samba (joined to a Windows Domain) with winbind running<br />
 <br />
-Steps:<br />
-working dir is where the above 3 source files are<br />
- autoconf<br />
- ./configure<br />
- make<br />
-add to httpd.conf (module section):<br />
- LoadModule auth_ntlm_winbind_module lib/apache2/mod_auth_ntlm_winbind.so<br />
 add to httpd.conf (virtual host):<br />
   AuthType NTLM<br />
@@ Line 27: / Line 10: @@
   NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"<br />
   Require user jbilyk<br />
+Don't forget to customize the final line with the username(s) that you wish to limit usage to.  Alternatively, make the final line "Require valid user" and change the helper line to inlude something like "-require-membership-of="WORKGROUP\Domain Users"".<br />
 Restart apache and test<br />