<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Anyone have any direction on how to set up SSO for RT for Windows Active Directory?</p>
<p><br>
</p>
<p>I am currently in the middle of following this set of directions from a SafeSquid app (<a class="OWAAutoLink" id="LPlnk842968" href="https://www.safesquid.com/content-filtering/integrating-linux-host-windows-ad-kerberos-sso-authentication">https://www.safesquid.com/content-filtering/integrating-linux-host-windows-ad-kerberos-sso-authentication</a>) that
seems like it would mostly apply to set up the service principals, user accounts, etc. This seems like the best set of directions I could find, unless anyone knows of any that are better? Most sites seem to assume Kerberos is already set up and working with
the appropriate permissions.</p>
<p></p>
<div id="LPBorder_GT_14635045282290.35026287151266616" style="width: 100%; text-indent: 0px; overflow: auto; margin-bottom: 20px; display: inline-block;">
<table id="LPContainer_14635045282060.6024694085968758" style="width: 90%; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top-color: rgb(200, 200, 200); border-bottom-color: rgb(200, 200, 200); border-top-width: 1px; border-bottom-width: 1px; border-top-style: dotted; border-bottom-style: dotted; position: relative; background-color: rgb(255, 255, 255);" cellspacing="0">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td id="ImageCell_14635045282080.35487992517372857" style="width: 250px; padding-right: 20px; display: table-cell; position: relative;" colspan="1">
<div id="LPImageContainer_14635045282090.5698955799910681" style="margin: auto; width: 250px; height: 62px; display: table; position: relative; background-color: rgb(255, 255, 255);">
<a id="LPImageAnchor_14635045282130.4862358690572269" style="text-align: center; display: table-cell;" href="https://www.safesquid.com/content-filtering/integrating-linux-host-windows-ad-kerberos-sso-authentication" target="_blank"><img width="250" height="62" style="border-width: 0px; width: 250px; height: 62px; margin-right: auto; margin-left: auto; vertical-align: bottom; display: inline-block; max-height: 250px; max-width: 250px;" aria-label="Preview image with link selected. Double-tap to open the link." src="https://www.safesquid.com/sites/default/files/swg-16-9W_1.png"></a></div>
</td>
<td id="TextCell_14635045282150.9534628838030295" style="padding: 0px; vertical-align: top; display: table-cell; position: relative;" colspan="2">
<div id="LPRemovePreviewContainer_14635045282150.4921296035151042" style="float: right;">
</div>
<div id="LPTitle_14635045282150.6158870658397142" style="top: 0px; color: rgb(0, 120, 215); line-height: 21px; font-family: "wf_segoe-ui_light", "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 21px; font-weight: 400;">
<a id="LPUrlAnchor_14635045282170.6541807747588511" style="text-decoration: none;" href="https://www.safesquid.com/content-filtering/integrating-linux-host-windows-ad-kerberos-sso-authentication" target="_blank">Integrating a Linux Host with a Windows AD for
Kerberos ...</a></div>
<div id="LPMetadata_14635045282260.3343672071880936" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); line-height: 14px; font-family: "wf_segoe-ui_normal", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; font-weight: 400;">
www.safesquid.com</div>
<div id="LPDescription_14635045282280.3095437224749528" style="color: rgb(102, 102, 102); line-height: 20px; overflow: hidden; font-family: "wf_segoe-ui_normal", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; font-weight: 400; display: block; max-height: 100px;">
Validate that IP of all our systems are resolvable by our DNS provider. Add the Linux host safesquid1 as a New Host in the DNS server's configuration such that it's ...</div>
</td>
</tr>
</tbody>
</table>
</div>
<p></p>
<p><br>
</p>
<p><span>And I am using:</span><br>
</p>
<p><br>
</p>
<p><font face="Times New Roman"></font></p>
<p style="margin: 0in 0in 10pt;"><font face="Calibri">Set($WebExternalAuth , 1); <br>
Set($WebFallbackToInternalAuth , undef);<br>
Set($WebExternalGecos , undef);<br>
Set($WebExternalAuto , undef); </font></p>
<p><font face="Times New Roman"></font>with the ExternalAuth extension.</p>
<p><br>
</p>
<p>Also using nginx with mod_auth_kerb.</p>
<p><br>
</p>
<p>Thanks,</p>
<p>ts<br>
</p>
</div>
</body>
</html>