Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of btricha@gmail.com designates
 64.233.184.224 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:mime-version:content-type;
        b=wEgQuaDgDChQq3QV3a0NoKhgfGL4ySFI9gx2iI6gpnXgz8QTXdmlxx9Go/BGN6dLIGh07VFoMULHL/GwXl4DxCOfRxasYZfKifpb5scpbaxYlmcCmMW9eqXL5591pWmNHHIoMc02ecSJrzMLaLD6fmreJOdBf3T7qF2PRO1fc94=
Message-ID: <3f81a4240712131843i4d17087eg360f28f218e64937@mail.gmail.com>
Date: Thu, 13 Dec 2007 19:43:53 -0700
From: "Bryan Richardson" <btricha@gmail.com>
To: users@httpd.apache.org
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_12089_19001421.1197600233742"
Subject: [users@httpd] Authentication via Kerberos

------=_Part_12089_19001421.1197600233742
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello,

I'm not new to Apache, but I am new to trying to set up authentication other
than the basic type.  I've been tasked to set up a Trac site for software
projects within my organization at work, and I'm required to restrict access
on a need-to-know basis.  Our company uses Active Directory (of course), and
I'm wanting to set up my web server such that users of the Trac sites can
use their Kerberos password rather than using a different one stored locally
on the web server.  I'd like to still be able to specify what users are
allowed access, but once I've granted access to a specific username (one
that's in the Active Directory) I'd like the Kerberos password associated
with the username to be the password used by Apache.

Is this possible?  I assume using Kerberos is possible, but is it possible
to specify users allowed rather than allowing all users in the Active
Directory access?

Thanks in advance! -- BTR

------=_Part_12089_19001421.1197600233742
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello,<br><br>I&#39;m not new to Apache, but I am new to trying to set up authentication other than the basic type.&nbsp; I&#39;ve been tasked to set up a Trac site for software projects within my organization at work, and I&#39;m required to restrict access on a need-to-know basis.&nbsp; Our company uses Active Directory (of course), and I&#39;m wanting to set up my web server such that users of the Trac sites can use their Kerberos password rather than using a different one stored locally on the web server.&nbsp; I&#39;d like to still be able to specify what users are allowed access, but once I&#39;ve granted access to a specific username (one that&#39;s in the Active Directory) I&#39;d like the Kerberos password associated with the username to be the password used by Apache.
<br><br>Is this possible?&nbsp; I assume using Kerberos is possible, but is it possible to specify users allowed rather than allowing all users in the Active Directory access?<br><br>Thanks in advance! -- BTR<br>

------=_Part_12089_19001421.1197600233742--