Michael Shadle mike503 at
Fri Jun 7 07:18:16 UTC 2013

This is a long time coming - I wanted to reply, I funded a project to try
to get GSSAPI/SPNEGO support into nginx.

The developer didn't know Kerberos nor nginx - but tried his best to get it
to work.

I could never get it to work, but my company's AD/Kerberos setup is
confusing even for an Apache setup (especially since I do not have admin
access to the domain and such)

Anyway, that code is up here, no idea if it works with newer versions of

and a bunch of forks, but nobody is very vocal about this functionality
with nginx sadly.

One of the more active forks is here:

I'd love to see this get further developed/tested/etc. - if anyone has done
this successfully, what their configs look like, OS, keytabs, whatever
else... because I'd like to *use* it :)

On Thu, Apr 18, 2013 at 12:02 PM, Friedrich Locke <friedrich.locke at
> wrote:

> I wonder if nginx supports kerberos in the same sense as apache does!
> I mean: with apache i may specify if i will want SSO or password (by
> retrieving the password from the kerberos database).
> The configuration options are:
>         KrbMethodNegotiate off/on
>         KrbMethodK5Passwd off/on
> These above are the directives for SSO or password (fetched from kdc
> database).
> Does nginx support the same way too ?
> Thanks in advance.
> _______________________________________________
> nginx mailing list
> nginx at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the nginx mailing list