Post

Kerberos keytab part-5

Kerberos keytab part-5

Posted
By Rahul Chandna
1 min read

The final piece of the puzzle: configuring Apache to use the keytab for Kerberos authentication. mod_auth_kerb handles the negotiation. The KrbMethodK5Passwd setting allows fallback to username/password if the browser doesn’t support Negotiate — useful during a transition period.

Kerberos in apache 2.2

  • Required modules

mod_auth_kerb

  • Add below in VirtualHost file
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

<VirtualHost local-dev-environment.domain:443>

    <Location />
        Auth Name "Active Directory Login"
        AythType Kerberos
        Krb5Keytab /home/system/conf/account.keytab
        KrbMethodNegotiate On
        KrbMethodK5Passwd On
        Require valid-user

        ....
        # information on what to do with the request after kerberos authentication
        ....
    </Location>

</VirtualHost>
Self Learning, Kerberos
kerberos keytab apache
This post is licensed under CC BY 4.0 by the author.