Home / server / Questions / 737790
In Process
Christoffer Reijer
Asked: 2015-11-21 04:14:53 +0800 CST

Apache Kerberos auth prompts user for password

  • 772

I am trying to setup single-sign on against our Active Directory server for my Apache using the mod_auth_kerb module.

I have the following configuration in Apache:

AuthType      Kerberos
AuthName      "Test"
KrbAuthRealms COMPANY.LOCAL
Krb5Keytab    /etc/apache2/http.keytab

The keytab was created with the following command:

ktpass -out http.keytab \
       -princ HTTP/[email protected] \
       -pass <REDACTED> \
       -mapuser COMPANY\myserver-HTTP \
       -crypto AES256-SHA1 \
       -ptype KRB5_NT_PRINCIPAL

I have verified that the principal in the keytab is also added to the account name.

I have another server with similar configuration where it works; the users are authenticated without a password prompt.

Any ideas on how to further troubleshoot this problem?

active-directory

1 Answers

  1. You need to set KrbMethodK5Passwd off in your apache conf file

    • 0