带有Active Directory的Apache2 PHP SSO [英] Apache2 PHP SSO with Active Directory

问题描述

我正在尝试为在Ubuntu Apache2中部署的php应用程序实现SSO，Windows域中的用户需要在不登录的情况下访问此应用程序.因此，需要帮助.任何已经尝试实现它的人.

I am trying to implement SSO for php application deployed in Ubuntu Apache2 and users in the Windows domain needs to access this app without signing in. So need help. Anyone who has already tried achieving it.

Ubuntu不在AD域下.

Ubuntu is not under AD domain.

推荐答案

我昨天使用 mod_auth_kerberos 进行了此操作.基本过程如下:

I did this yesterday using mod_auth_kerberos. Basic process is as follows:

1. 安装kerberos并配置

1. Install kerberos and configure

在活动目录上创建一个新用户

On active directory create a new user

在Windows上使用ktpass创建密钥表

Use ktpass on windows to create a keytab

将密钥表复制到ubuntu并配置apache以使用密钥表

Copy keytab to ubuntu and configure apache to use keytab

在此处查看文档: http://www.grolmsnet.de/kerbtut/.它比以往任何时候都更好地解释了配置文件.

Have a look at the documentation here: http://www.grolmsnet.de/kerbtut/. It explains the configuration files better than I ever could.

Ubuntu特定的位可能只是安装过程，您将需要进行以下操作:

Ubuntu specific bits are probably just installation, for which you'll want:

sudo apt-get install krb5-user libapache2-mod-auth-kerb

这篇关于带有Active Directory的Apache2 PHP SSO的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！