带有 Active Directory 的 Apache2 PHP SSO [英] Apache2 PHP SSO with Active Directory

问题描述

我正在尝试为部署在 Ubuntu Apache2 中的 php 应用程序实现 SSO，Windows 域中的用户需要在不登录的情况下访问此应用程序.因此需要帮助.任何已经尝试实现它的人.

I am trying to implement SSO for php application deployed in Ubuntu Apache2 and users in the Windows domain needs to access this app without signing in. So need help. Anyone who has already tried achieving it.

Ubuntu 不在 AD 域下.

Ubuntu is not under AD domain.

推荐答案

我昨天使用 mod_auth_kerberos 做了这个.基本流程如下:

I did this yesterday using mod_auth_kerberos. Basic process is as follows:

1. 安装kerberos并配置

1. Install kerberos and configure

在活动目录上创建一个新用户

On active directory create a new user

在 Windows 上使用 ktpass 创建密钥表

Use ktpass on windows to create a keytab

复制keytab到ubuntu并配置apache使用keytab

Copy keytab to ubuntu and configure apache to use keytab

查看此处的文档:http://www.grolmsnet.de/kerbtut/.它比我以往任何时候都更好地解释了配置文件.

Have a look at the documentation here: http://www.grolmsnet.de/kerbtut/. It explains the configuration files better than I ever could.

Ubuntu 特定的位可能只是安装，您需要:

Ubuntu specific bits are probably just installation, for which you'll want:

sudo apt-get install krb5-user libapache2-mod-auth-kerb

这篇关于带有 Active Directory 的 Apache2 PHP SSO的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！