Apache2 PHP SSO与Active Directory

Question

I am trying to implement SSO for php application deployed in Ubuntu Apache2 and users in the Windows domain needs to access this app without signing in. So need help. Anyone who has already tried achieving it.

Ubuntu is not under AD domain.

Answer 1

I did this yesterday using mod_auth_kerberos. Basic process is as follows:

1. Install kerberos and configure

2. On active directory create a new user

3. Use ktpass on windows to create a keytab

4. Copy keytab to ubuntu and configure apache to use keytab

Have a look at the documentation here: http://www.grolmsnet.de/kerbtut/. It explains the configuration files better than I ever could.

Ubuntu specific bits are probably just installation, for which you'll want:

sudo apt-get install krb5-user libapache2-mod-auth-kerb