Hello Sebastian, Thank you for your help. My comments are integrated below.
Ido Levy [EMAIL PROTECTED] wrote on 19/02/2008 18:16:49: > Ido Levy <[EMAIL PROTECTED]> writes: > > > I am looking for a way to enable users to get access to their space through > > the web browser. > > I would like to integrate it with our Kerberized SSO environment as well. > > I tried this module http://modauthkerb.sourceforge.net/ but I have > > encounter some issues: > > Using mod_auth_gss > (<http://cvs.opensolaris. > org/source/raw/sfwnv/test_stevel/usr/src/cmd/apache2/mod_auth_gss/mod_auth_gss. > c>, > install with "apxs -c -i -l gss mod_auth_gss.c") I have apache-2.2.8 > running with authentication via Kerberos. While mod_auth_kerb has the > advantage of providing a username/password fallback, I haven't compiled > it under Solaris. Following your advice I tried to compile the module on RHEL 5 64 bit architecture. Unfortunately I got the following: /usr/sbin/apxs -c -i -l gss ./mod_auth_gss.c /usr/lib64/apr-1/build/libtool --silent --mode=compile gcc -prefer-pic -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -DLINUX=2 -D_REENTRANT -D_GNU_SOURCE -pthread -I/usr/include/httpd -I/usr/include/apr-1 -I/usr/include/apr-1 -c -o ./mod_auth_gss.lo ./mod_auth_gss.c && touch ./mod_auth_gss.slo ./mod_auth_gss.c:1: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:20:29: warning: character constant too long for its type ./mod_auth_gss.c:21:27: warning: character constant too long for its type ./mod_auth_gss.c:22:36: warning: character constant too long for its type ./mod_auth_gss.c:23:27: warning: character constant too long for its type ./mod_auth_gss.c:28: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:30: error: stray '#' in program ./mod_auth_gss.c:31:16: error: invalid suffix "px" on integer constant ./mod_auth_gss.c:32: error: stray '#' in program ./mod_auth_gss.c:38:15: error: exponent has no digits ./mod_auth_gss.c:39:18: error: invalid suffix "px" on integer constant ./mod_auth_gss.c:41: error: stray '#' in program ./mod_auth_gss.c:41: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'Iconbar', ./mod_auth_gss.c:41: error: stray '#' in program; ./mod_auth_gss.c:44: error: stray '#' in program; ./mod_auth_gss.c:44: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'Iconbar', ./mod_auth_gss.c:44: error: stray '#' in program; ./mod_auth_gss.c:47: error: stray '#' in program; ./mod_auth_gss.c:47: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'Iconbar', ./mod_auth_gss.c:47: error: stray '#' in program; ./mod_auth_gss.c:50: error: stray '#' in program; ./mod_auth_gss.c:50: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'Iconbar', ./mod_auth_gss.c:50: error: stray '#' in program; ./mod_auth_gss.c:53: error: stray '#' in program; ./mod_auth_gss.c:53: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'Iconbar', ./mod_auth_gss.c:53: error: stray '#' in program; ./mod_auth_gss.c:56: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:143: error: stray '#' in program ./mod_auth_gss.c:145: error: stray '#' in program ./mod_auth_gss.c:145: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:146: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:146: error: stray '#' in program ./mod_auth_gss.c:146: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:147: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:148: error: stray '#' in program ./mod_auth_gss.c:149: error: stray '#' in program ./mod_auth_gss.c:150: error: stray '#' in program ./mod_auth_gss.c:151: error: stray '#' in program ./mod_auth_gss.c:152: error: stray '#' in program ./mod_auth_gss.c:153: error: stray '#' in program ./mod_auth_gss.c:154: error: stray '#' in program ./mod_auth_gss.c:155: error: stray '#' in program ./mod_auth_gss.c:156: error: stray '#' in program ./mod_auth_gss.c:157: error: stray '#' in program ./mod_auth_gss.c:158: error: stray '#' in program ./mod_auth_gss.c:159: error: stray '#' in program ./mod_auth_gss.c:160: error: stray '#' in program ./mod_auth_gss.c:161: error: stray '#' in program ./mod_auth_gss.c:163: error: stray '#' in program ./mod_auth_gss.c:163: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:164: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:164: error: stray '#' in program ./mod_auth_gss.c:164: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:165: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:167: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:169: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:171: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:176: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:177: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:184: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:191: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:198: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:212: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:218: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:228: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:232: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:233: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:235: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:248: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:261: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:299: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:324: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:373: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:588: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:598: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:621: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:677: error: expected identifier or '(' before '<' token ./mod_auth_gss.c:689: error: expected identifier or '(' before numeric constant ./mod_auth_gss.c:693: error: missing terminating " character ./mod_auth_gss.c:694: error: missing terminating " character apxs:Error: Command failed with rc=65536 Any advice ? > > For an authentication needing part of your website you could either put > these directives into a .htaccess file (assuming that your httpd > configuration allows authentication override) or a directory or location > section: > > AuthType GSSAPI > AuthGssServiceName HTTP > AuthGssKeytabFile /opt/apache/2.2.8/conf/http.keytab > AuthGssDebug 0 > require valid-user > > The username - should you need to specifiy access only for select users > - is the Kerberos principal. > > > Sebastian > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
