Re: Multiple Authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Brian Weed wrote:
I'm using Apache v2.2.4 (on Windows Server 2003) and
I'm trying to use both SSPI and Basic Authentication
together so that both Domain and non-domain users can
log in to my Trac Wiki site.

Withi this config:

<LocationMatch "/cgi-bin/trac.cgi/[^/]+/login">

  # Domain Login

  AuthName "my domain"

  AuthType SSPI
  SSPIAuth On
  SSPIAuthoritative Off
  SSPIDomain MYDOMAIN
  SSPIOfferBasic On
  SSPIOfferSSPI Off
  SSPIOmitDomain On
  SSPIPerRequestAuth On

 # Non-domain login
  AuthType Basic
  AuthBasicAuthoritative Off
  AuthUserFile D:/wikis/trac.htpasswd

  Require valid-user

</LocationMatch>

It only allows Domain users to log in.  Its not
falling back to Basic via AuthUserFile.
If I turn off SSPI, then it allows Basic Auth (but
obviously not Domain login).

Searching the web, I've found a few people with
similar problems, but no real solution:

http://svn.haxx.se/users/archive-2006-09/1384.shtml
and
http://www.svnforum.org/2017/viewtopic.php?p=11517

The error I get in the error.log is: "...Logon
failure: unknown user name or bad password.  : user
MYDOMAIN\\nondomainuser: authentication failure for
"/cgi-bin/trac.cgi/foo/login"

So, it seems as though it's always prepending the
domain, even when falling back to Basic, or its not
falling back at all.

Is there some other module I have to install to
support falling back?
Any ideas as to what else I may be doing wrong?

---------------- End original message. ---------------------

Just a thought... (caveat being I have not messed with anything beyond basic authentication).

What about having two different virtual hosts serving as entry points to this application which both point to the same application directory?

I think by doing that you can have one of the authentication methods associated with one virtual host and the other with the second virtual host.

Dragon

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 Venimus, Saltavimus, Bibimus (et naribus canium capti sumus)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux