the user account has "Password never expires" set and write down the password
you set for the account (you will need it later).
+When using ticket based authentication (KrbMethodNegotiate) and also wanting
+to save the ticket (KrbSaveCredentials), the user account for the Kerberos
+principal must have the option "Account is trusted for delegation" set. This
+enables to user account to delegate the tickets to the server for further
+authentication.
+
If you want to kerberize additional hosts you need to create one user account
per each kerberized host.
included in versions 1.7beta and later on Unix platforms including Mac OSX,
maybe 1.8 and later on Windows.)
+Next, you have to specify URL's for which it is allowed to use the Negotiate
+authentication method. It's done by setting the
+network.negotiate-auth.trusted-uris preference. In order to set it, just type
+"about:config" in the URL bar and then set the value of
+"network.negotiate-auth.trusted-uris" to "https://secured.webserver.name".
+
If you want to find out what happens in the Negotiateauth component use
following environment variables:
NSPR_LOG_MODULES=negotiateauth:5
before starting Mozilla. You will see debugging messages logged in the file
specified by NSPR_LOG_FILE (/tmp/negotiateauth.log)
+KDE Konqueror
+-------------
+http://www.grolmsnet.de/kerbtut/konqueror.html
+
6. Access control
-----------------
If you want only particular users to be able to access the secured area, you
can list their principal names in the appropriate Require directive. They must
be full Kerberos names, including the REALM part. For example:
- Require kouril@REALM.COM kouril REALM.CZ
+ Require user kouril@REALM.COM
The user's name is put by Apache in the REMOTE_USER environment variable so
that it could be used by cgi-bin scripts.
projects / mod_auth_kerb.cvs / .git / blobdiff