Single sign-on using apache in windows 7 and mod_auth_sspi

I am running the apache server (xampp 1.7.3) on my local PC with Windows 7. This PC is connected to the local network and to the Active Directory domain called "colors". My local username is CHRISTOPHER-PC / Christopher and my domain username is COLORS / Christopher.

To connect the administrator to the AD server, I use the PHP adLDAP script . By default, this script (examples / authenticate.php) gives the user two input fields for entry. It works great.

But I want my users to automatically sign up if they are logged in to their AD account. For this I am trying to use the mod_auth_sspi module . But I have some problems ...: \

My httpd.conf looks like this:

<Directory "C:/xampp/htdocs">
  Options Indexes FollowSymLinks Includes ExecCGI
  AllowOverride All
  Order allow,deny
  Allow from all

  AuthName "A Protected Place"
  AuthType SSPI
  SSPIAuth On
  SSPIAuthoritative On
  SSPIDomain colours
  SSPIOfferBasic On
  SSPIBasicPreferred On
  require valid-user
</Directory>

When I go to http: // localhost / or http: // my-ip-address / (from another computer), the dialog box I opens and asks for the domain username and password. I know this is called "require valid-user", but if I delete it, the user will not be automatically registered.

+3
source share
2 answers

Follow these steps:

  • Add Integrated IE Advanced Security Authentication.
  • Add your URLs (http: // my-ip-address /) to the trusted zones.
+1
source

, , , IE, ? , , ( mod_auth_sspi).

> > "" > " " > "" () > "" () >

!

ps: PHP : $_SERVER [ "REMOTE_USER" ] $_SERVER [ "PHP_AUTH_USER" ]. "domain/user_name".

0

Source: https://habr.com/ru/post/1741423/


All Articles