特殊:Badtitle/NS100:ApacheAuthViaKerberos:修订间差异
小 创建新页面为 '{{From|https://help.ubuntu.com/community/ApacheAuthViaKerberos}} {{Languages|UbuntuHelp:ApacheAuthViaKerberos}} === Apache Pre-reqs === Install "libapache-mod-auth-kerb" - of co...' |
小无编辑摘要 |
||
第2行: | 第2行: | ||
{{Languages|UbuntuHelp:ApacheAuthViaKerberos}} | {{Languages|UbuntuHelp:ApacheAuthViaKerberos}} | ||
=== Apache Pre-reqs === | === Apache Pre-reqs === | ||
Install "libapache-mod-auth-kerb" - of course you'll also need apache setup and this article assumes you've already got kerberos setup as it's discussed [[ | Install "libapache-mod-auth-kerb" - of course you'll also need apache setup and this article assumes you've already got kerberos setup as it's discussed [[ADAuthentication|here]]. One example of how you can take advantage of Kerbose & Apache in a case like this is to enable authentication with your [[ADAuthentication|Active Directory]] server. | ||
<pre><nowiki> | <pre><nowiki> | ||
sudo apt-get install libapache-mod-auth-kerb | sudo apt-get install libapache-mod-auth-kerb | ||
第11行: | 第11行: | ||
So, to put that another way: ''HTTP/[email protected]'' | So, to put that another way: ''HTTP/[email protected]'' | ||
=== Edit VirtualHosts === | === Edit VirtualHosts === | ||
In whatever sections of your Apache [http://en.wikipedia.org/wiki/Virtual_host | In whatever sections of your Apache [[http://en.wikipedia.org/wiki/Virtual_host | VirtualHosts]] (or just apache config if you're running only one site), you want to add lines of the following form: | ||
<pre><nowiki> | <pre><nowiki> | ||
AuthName "Kerberos Login" | AuthName "Kerberos Login" | ||
第28行: | 第28行: | ||
</nowiki></pre> | </nowiki></pre> | ||
=== Helpful Pages === | === Helpful Pages === | ||
* This article borrows heavily from [http://support.microsoft.com/kb/555092 here]. | * This article borrows heavily from [[http://support.microsoft.com/kb/555092|here]]. | ||
[[category:UbuntuHelp]] | [[category:UbuntuHelp]] |
2010年5月19日 (三) 16:44的版本
文章出处: |
{{#if: | {{{2}}} | https://help.ubuntu.com/community/ApacheAuthViaKerberos }} |
点击翻译: |
English {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/af | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Afrikaans| [[::ApacheAuthViaKerberos/af|Afrikaans]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ar | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|العربية| [[::ApacheAuthViaKerberos/ar|العربية]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/az | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|azərbaycanca| [[::ApacheAuthViaKerberos/az|azərbaycanca]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/bcc | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|جهلسری بلوچی| [[::ApacheAuthViaKerberos/bcc|جهلسری بلوچی]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/bg | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|български| [[::ApacheAuthViaKerberos/bg|български]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/br | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|brezhoneg| [[::ApacheAuthViaKerberos/br|brezhoneg]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ca | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|català| [[::ApacheAuthViaKerberos/ca|català]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/cs | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|čeština| [[::ApacheAuthViaKerberos/cs|čeština]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/de | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Deutsch| [[::ApacheAuthViaKerberos/de|Deutsch]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/el | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Ελληνικά| [[::ApacheAuthViaKerberos/el|Ελληνικά]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/es | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|español| [[::ApacheAuthViaKerberos/es|español]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/fa | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|فارسی| [[::ApacheAuthViaKerberos/fa|فارسی]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/fi | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|suomi| [[::ApacheAuthViaKerberos/fi|suomi]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/fr | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|français| [[::ApacheAuthViaKerberos/fr|français]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/gu | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|ગુજરાતી| [[::ApacheAuthViaKerberos/gu|ગુજરાતી]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/he | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|עברית| [[::ApacheAuthViaKerberos/he|עברית]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/hu | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|magyar| [[::ApacheAuthViaKerberos/hu|magyar]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/id | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Bahasa Indonesia| [[::ApacheAuthViaKerberos/id|Bahasa Indonesia]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/it | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|italiano| [[::ApacheAuthViaKerberos/it|italiano]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ja | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|日本語| [[::ApacheAuthViaKerberos/ja|日本語]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ko | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|한국어| [[::ApacheAuthViaKerberos/ko|한국어]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ksh | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Ripoarisch| [[::ApacheAuthViaKerberos/ksh|Ripoarisch]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/mr | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|मराठी| [[::ApacheAuthViaKerberos/mr|मराठी]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ms | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Bahasa Melayu| [[::ApacheAuthViaKerberos/ms|Bahasa Melayu]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/nl | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Nederlands| [[::ApacheAuthViaKerberos/nl|Nederlands]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/no | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|norsk| [[::ApacheAuthViaKerberos/no|norsk]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/oc | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|occitan| [[::ApacheAuthViaKerberos/oc|occitan]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/pl | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|polski| [[::ApacheAuthViaKerberos/pl|polski]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/pt | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|português| [[::ApacheAuthViaKerberos/pt|português]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ro | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|română| [[::ApacheAuthViaKerberos/ro|română]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/ru | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|русский| [[::ApacheAuthViaKerberos/ru|русский]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/si | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|සිංහල| [[::ApacheAuthViaKerberos/si|සිංහල]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/sq | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|shqip| [[::ApacheAuthViaKerberos/sq|shqip]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/sr | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|српски / srpski| [[::ApacheAuthViaKerberos/sr|српски / srpski]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/sv | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|svenska| [[::ApacheAuthViaKerberos/sv|svenska]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/th | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|ไทย| [[::ApacheAuthViaKerberos/th|ไทย]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/tr | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Türkçe| [[::ApacheAuthViaKerberos/tr|Türkçe]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/vi | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|Tiếng Việt| [[::ApacheAuthViaKerberos/vi|Tiếng Việt]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/yue | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|粵語| [[::ApacheAuthViaKerberos/yue|粵語]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/zh | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|中文| [[::ApacheAuthViaKerberos/zh|中文]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/zh-hans | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|中文(简体)| [[::ApacheAuthViaKerberos/zh-hans|中文(简体)]]}}|}} {{#ifexist: {{#if: UbuntuHelp:ApacheAuthViaKerberos | UbuntuHelp:ApacheAuthViaKerberos | {{#if: | :}}ApacheAuthViaKerberos}}/zh-hant | • {{#if: UbuntuHelp:ApacheAuthViaKerberos|中文(繁體)| [[::ApacheAuthViaKerberos/zh-hant|中文(繁體)]]}}|}} |
{{#ifeq:UbuntuHelp:ApacheAuthViaKerberos|:ApacheAuthViaKerberos|请不要直接编辑翻译本页,本页将定期与来源同步。}} |
{{#ifexist: :ApacheAuthViaKerberos/zh | | {{#ifexist: ApacheAuthViaKerberos/zh | | {{#ifeq: {{#titleparts:ApacheAuthViaKerberos|1|-1|}} | zh | | }} }} }} {{#ifeq: {{#titleparts:ApacheAuthViaKerberos|1|-1|}} | zh | | }}
Apache Pre-reqs
Install "libapache-mod-auth-kerb" - of course you'll also need apache setup and this article assumes you've already got kerberos setup as it's discussed here. One example of how you can take advantage of Kerbose & Apache in a case like this is to enable authentication with your Active Directory server.
sudo apt-get install libapache-mod-auth-kerb
/etc/krb5.keytab
You need to setup a kerberos keytab, put it where ever, I put mine at /etc/krb5.keytab. This file should contain a line of the form HTTP/replace_your_web_server_full_hostname_here@ACTIVE_DIRECTORY_FULL_DOMAIN_NAME. So, to put that another way: HTTP/[email protected]
Edit VirtualHosts
In whatever sections of your Apache [| VirtualHosts] (or just apache config if you're running only one site), you want to add lines of the following form:
AuthName "Kerberos Login" AuthType Kerberos Krb5Keytab /etc/krb5.keytab KrbAuthRealm EXAMPLE.COM KrbMethodNegotiate off KrbSaveCredentials off KrbVerifyKDC off Require valid-user
Restart Apache
Almost done:
sudo /etc/init.d/apache restart
Helpful Pages
- This article borrows heavily from [[1]].