For what it's worth, here's how we're doing it on apache linux, authing to a 
windows domain. I think you can flip off KrbMethodNegotiate if you wanted to 
force password. 

<Location />
        AuthType Kerberos
        AuthName "trac.domain.example"
        KrbServiceName HTTP/trac.domain.example
        Krb5Keytab /usr/local/apache2/http_trac.keytab
        KrbSaveCredentials on
        KrbAuthRealms EXAMPLE.COM
        Require valid-user
        KrbMethodNegotiate on
        KrbMethodK5Passwd on
</Location>


On Dec 4, 2009, at 2:22 PM, Chris wrote:

> Setting SSPIBasicPreferred On didn't do the trick. I came across this
> very recent post though it was strictly focusing on Subversion. Seems
> this isn't as straight forward as I thought it might be.
> 
> http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=2425823
> 
> --
> 
> You received this message because you are subscribed to the Google Groups 
> "Trac Users" group.
> To post to this group, send email to trac-us...@googlegroups.com.
> To unsubscribe from this group, send email to 
> trac-users+unsubscr...@googlegroups.com.
> For more options, visit this group at 
> http://groups.google.com/group/trac-users?hl=en.
> 
> 

--

You received this message because you are subscribed to the Google Groups "Trac 
Users" group.
To post to this group, send email to trac-us...@googlegroups.com.
To unsubscribe from this group, send email to 
trac-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.


Reply via email to