[rt-users] RT4.0.1 ExternalAuth and SSO

[declaya]

Hi Raphaël,
this also sounds like an interesting method. I'm going to check it out
today. 
I guess that mod_ntlm is alot easier than fumbling around with kerberos.
Thanks for this interesting idea!



Raphaël MOUNEYRES wrote:
> 
> Hello,
> here we'vebeen able to to SSO auth via apache using mod_ntlm 
> (mod_ntlm-0.2-10mdv2010.1.x86_64 )
> 
> Info was from 
> http://requesttracker.wikia.com/wiki/NtlmAuthentication
> http://modntlm.sourceforge.net/
> 
> here is a sample of our apache config
> <VirtualHost xx.xx.xx.xx:80>
>    ServerName xx.xx.xx.xx
>    ServerAdmin xxx at xxx.com
> 
>    AddDefaultCharset UTF-8
>    DocumentRoot /opt/rt3/share/html
> 
>    <Directory "/opt/rt3/share/html/">
>        Order allow,deny
>        Allow from all 
> 
> # Options d’authentifications NTLM
>        AuthName "Request Tracker"
>        AuthType NTLM
>        NTLMAuth on
>        NTLMAuthoritative on
>        NTLMDomain xxx.local
>        NTLMServer xxx.xxx.local
>  NTLMBackup xxx.xxx.local
>        require valid-user
>    </Directory>
>  
>    PerlModule Apache2::compat
>    PerlModule Apache::DBI
>    PerlRequire /opt/rt3/bin/webmux.pl
> 
>    <Location />
>             SetHandler perl-script
>             PerlHandler RT::Mason
>    </Location>
> 
> #Dossiers exclus de l’authentification
>    <Location /NoAuth>
>         Satisfy any
>         Allow from all
>    </Location>
>    <Location /REST/1.0/NoAuth/>
>         Satisfy any
>         Allow from all
>    </Location>
> 
> </VirtualHost>
> 
> Raphaël MOUNEYRES
> Ingénieur Moyens Tests
> Avenue Paul Gellos 64990 Mouguerre
> Phone: +33 (0)5 59 58 41 51
> 
> 
> 
> declaya <chocoboselphie at gmx.de> 
> Envoyé par : rt-users-bounces at lists.bestpractical.com
> 20/09/2011 07:45
> 
> A
> rt-users at lists.bestpractical.com
> cc
> 
> Objet
> Re: [rt-users] RT4.0.1 ExternalAuth and SSO
> 

-- 
View this message in context: http://old.nabble.com/RT4.0.1-ExternalAuth-and-SSO-tp32478912p32503716.html
Sent from the Request Tracker - User mailing list archive at Nabble.com.