Author: jelmer Date: 2006-04-08 17:12:37 +0000 (Sat, 08 Apr 2006) New Revision: 522
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=522 Log: Add AUTHORS and README file Search for apxs2 in configure Patch from Ronan Waide Added: trunk/mod_ntlm_winbind/AUTHORS trunk/mod_ntlm_winbind/README Modified: trunk/mod_ntlm_winbind/configure.in Changeset: Added: trunk/mod_ntlm_winbind/AUTHORS =================================================================== --- trunk/mod_ntlm_winbind/AUTHORS 2006-03-28 20:59:49 UTC (rev 521) +++ trunk/mod_ntlm_winbind/AUTHORS 2006-04-08 17:12:37 UTC (rev 522) @@ -0,0 +1,10 @@ +Andreas Gal <[EMAIL PROTECTED]> +Sverre H. Huseby <[EMAIL PROTECTED]> +Tim Potter <[EMAIL PROTECTED]> +Andrew Bartlett <[EMAIL PROTECTED]> + +Apache2 code by Waider <[EMAIL PROTECTED]> + +Based partially on: + mod_ntlm.c for Win32 by Tim Costello <[EMAIL PROTECTED]> + pam_smb by Dave Airlie <[EMAIL PROTECTED]> Added: trunk/mod_ntlm_winbind/README =================================================================== --- trunk/mod_ntlm_winbind/README 2006-03-28 20:59:49 UTC (rev 521) +++ trunk/mod_ntlm_winbind/README 2006-04-08 17:12:37 UTC (rev 522) @@ -0,0 +1,79 @@ +mod_ntlm_winbind is an Apache 1.x/2.x module that provides NTLM and +Basic authentication via winbind. + +INSTALLATION: +The configure.in script and Makefile are essentially wrappers around +apxs, which should be able to do all the work by itself. Having said +that, the build/install process should simply be a matter of: + +$ autoconf +$ ./configure +$ make +$ sudo make install + +The configure script will attempt to locate apxs and httpd. It will +prefer apxs2 to apxs, and will use the httpd it finds to determine +whether it is building for Apache 1 or Apache 2. You can override the +detected settings using --with-apxs=/path/to/apxs and +--with-httpd=/path/to/httpd + +In the event that the configure/Make combination doesn't work, you +should be able to do: + +[Apache 1.x] +$ apxs -i mod_ntlm_winbind.c + +[Apache 2.x] +$ apxs -DAPACHE2 -i mod_ntlm_winbind.c +(substitute apxs2 as appropriate) + +CONFIGURATION +mod_ntlm_winbind uses the same ntlm_auth helper as the Squid proxy, so +the same setup applies as for Squid: the winbindd_privileged directory +must be accessible by the webserver userid. The configuration +directives added by this module are as follows: + +NTLMAuth + set to 'on' to activate NTLM authentication +NegotiateAuth + set to 'on' to activate Negotiate authentication +NTLMBasicAuthoritative + set to 'off' to allow access control to be passed along to lower + modules if the UserID is not known to this module +NTLMBasicAuth + set to 'on' to activate Basic authentication (for non-NTLM browsers) +NTLMBasicRealm + Realm to use for Basic authentication +NTLMAuthHelper + Location and arguments to the Samba ntlm_auth utility for NTLM auth +NegotiateAuthHelper + Location and arguments to the Samba ntlm_auth utility for Negotiate auth +PlaintextAuthHelper + Location and arguments to the Samba ntlm_auth utility for Plaintext auth + +Here are some example configuration blocks: + +NTLM authentication: + +<Directory "/var/www/auth"> + AuthName "NTLM Authentication thingy" + NTLMAuth on + NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" + NTLMBasicAuthoritative on + AuthType NTLM + require valid-user +</Directory> + +NTLM+Negotiate authentication: + +<Directory "/var/www/auth"> + AuthName "NTLM Authentication thingy" + NTLMAuth on + NegotiateAuth on + NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp" + NegotiateAuthHelper "/usr/bin/ntlm_auth --helper-protocol=gss-spnego" + NTLMBasicAuthoritative on + AuthType NTLM + AuthType Negotiate + require valid-user +</Directory> Modified: trunk/mod_ntlm_winbind/configure.in =================================================================== --- trunk/mod_ntlm_winbind/configure.in 2006-03-28 20:59:49 UTC (rev 521) +++ trunk/mod_ntlm_winbind/configure.in 2006-04-08 17:12:37 UTC (rev 522) @@ -9,7 +9,7 @@ AC_STDC_HEADERS # We use axps to compile source files, which may be in /usr/sbin -AC_PATH_PROG([APXS], [apxs], [/usr/sbin/apxs], [$PATH:/usr/sbin]) +AC_PATH_PROGS([APXS], [apxs2 apxs],, [$PATH:/usr/sbin]) AC_PATH_PROG([HTTPD], [httpd], [/usr/sbin/httpd], [$PATH:/usr/sbin]) APACHE_VER=`${HTTPD} -v | grep version`
