Apache pam krb5

Discussion in 'Apache' started by zerocool22, Mar 18, 2008.

  1. #1
    Hey, i have set up my linux(centos) to authenticate to active directory thru pam and ldap. Now i need to authenticate my apache webserver to that. So i have installed mod_auth_pam,

    added the following to /etc/httpd/conf/httpd.conf
    ------------------------------
    LoadModule auth_pam_module modules/mod_auth_pam.so
    LoadModule auth_sys_group_module modules/mod_auth_sys_group.so


    <Directory "/home/vanessa">
    AuthType Basic
    AuthName "Kerb 5 Username and Password Required"
    Require valid-user

    AllowOverride None
    </Directory>

    To allow HTTP authentication based on the Kerberos 5 PAM module, this is how I setup my httpd config file:

    #%PAM-1.0

    auth required /lib/security/$ISA/pam_env.so
    auth sufficient /lib/security/$ISA/pam_krb5.so minimum_uid=5000
    auth required /lib/security/$ISA/pam_deny.so

    account required /lib/security/$ISA/pam_krb5.so


    I have not set up any ssl/tls anywhere cause honestly i don't know how to do this, is this required to make this work cause i don't get this to work. Can someone post me a detailed installation of ssl/tls or how to get this to work.

    The error i get is the following i try to surf to http://localhost/vanessa i enter my active directory credentials and it says "forbidden, you don't have acces to enter /vanessa/ on this server" so i think the whole module does work but it just need to set some permissions somewhere?
     
    zerocool22, Mar 18, 2008 IP