[mod_python] Mod_python and kerberos authentication (mod_auth_kerb)

Cassiano, Marco mcassiano at manord.com
Fri Jan 11 11:28:48 EST 2008


Hi all,
 
I've just configured our apache server (Linux RedHat) for kerberos authentication to allow our windows domain users to access it without having to reauthenticate.
Everything works fine for a plain html directory, so I'm pretty sure that the kerberos configuration for the apache server is working.
When I try to specify Kerberos authentication together with mod_python it's not working. I got the message : 
 
 

Bad Request


Your browser sent a request that this server could not understand.

 

My httpd configuration is :


Alias /login/ "/var/www/kerb/login/"


<Directory "/var/www/kerb/login">
##  AuthName "Kerberos Login"
  AuthType Kerberos
  KrbAuthRealm FOO.COM
  KrbServiceName HTTP/apache.foo.com at FOO.COM <mailto:HTTP/apache.foo.com at FOO.COM> 
  Krb5Keytab /etc/httpd/conf/apache.tab
  KrbMethodNegotiate on
  KrbMethodK5Passwd off
#  KrbSaveCredentials off
#  KrbVerifyKDC off
  Require valid-user

  Order Deny,Allow
  Deny from all
  Allow from foo.com
  Allow from 127.0.0.1

  SetHandler mod_python
  PythonHandler mod_python.publisher | .py
  PythonDebug on
  PythonOption ApplicationPath '/'

</Directory>


Thanks in advance for your advice

Marco Cassiano 
  
Manifatture del Nord srl 

Italy


 

---------------------------------------------------------------------------------------------

Il contenuto della presente comunicazione è riservato e destinato esclusivamente ai destinatari indicati. Nel caso in cui sia ricevuto da persona diversa dal destinatario sono proibite la diffusione, la distribuzione e la copia. Nel caso riceveste la presente per errore, Vi preghiamo di informarci e di distruggerlo e/o cancellarlo dal Vostro computer, senza utilizzare i dati contenuti.

 

La presente comunicazione (comprensiva dei documenti allegati) non avrà valore di proposta contrattuale e/o accettazione di proposte provenienti dal destinatario, nè rinuncia o riconoscimento di diritti, debiti e/o crediti, nè sarà impegnativa, qualora non sia sottoscritto successivo accordo da chi può validamente obbligarci. Non deriverà alcuna responsabilità precontrattuale a ns. carico, se la presente non sia seguita da contratto sottoscritto dalle parti.

---------------------------------------------------------------------------------------------

The contents of the present communication is strictly confidential and reserved solely to the referred addressees. In the event was received by person different from the addressee, it is forbidden the diffusion, distribution and copy. In the event you have received it mistakenly we ask you to inform us and to destroy and/or to delete it by your computer, without using the data herein contained.

 

The present message (eventual annexes inclusive) shall not be considered any contractual proposal and/or acceptance of offer coming from the addressee, nor waiver neither recognizance of rights, debts and/or credits, and it shall not be binding, when it is not executed a subsequent agreement by person who could lawfully represent us. No pre-contractual liability shall derive to us, when the present communication is not followed by any binding agreement between the parties.

---------------------------------------------------------------------------------------------

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mm_cfg_has_not_been_edited_to_set_host_domains/pipermail/mod_python/attachments/20080111/5f294aaf/attachment.html


More information about the Mod_python mailing list