This is a long time coming - I wanted to reply, I funded a project to try to get GSSAPI/SPNEGO support into nginx.<div><br></div><div>The developer didn't know Kerberos nor nginx - but tried his best to get it to work.</div>
<div><br></div><div>I could never get it to work, but my company's AD/Kerberos setup is confusing even for an Apache setup (especially since I do not have admin access to the domain and such)</div><div><br></div><div>
Anyway, that code is up here, no idea if it works with newer versions of nginx.</div><div><a href="https://github.com/mike503/spnego-http-auth-nginx-module" target="_blank">https://github.com/mike503/spnego-http-auth-nginx-module</a></div>
<div><br></div><div>and a bunch of forks, but nobody is very vocal about this functionality with nginx sadly.</div><div><a href="https://github.com/mike503/spnego-http-auth-nginx-module/network" target="_blank">https://github.com/mike503/spnego-http-auth-nginx-module/network</a></div>
<div><br></div><div>One of the more active forks is here:</div><div><a href="https://github.com/stnoonan/spnego-http-auth-nginx-module">https://github.com/stnoonan/spnego-http-auth-nginx-module</a></div><div><br></div><div>
I'd love to see this get further developed/tested/etc. - if anyone has done this successfully, what their configs look like, OS, keytabs, whatever else... because I'd like to *use* it :)</div>
<div><br></div><div><div class="gmail_quote">On Thu, Apr 18, 2013 at 12:02 PM, Friedrich Locke <span dir="ltr"><<a href="mailto:friedrich.locke@gmail.com" target="_blank">friedrich.locke@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div>I wonder if nginx supports kerberos in the same sense as apache does!<br></div>
I mean: with apache i may specify if i will want SSO or password (by retrieving the password from the kerberos database).<br>
<br></div>The configuration options are:<br><br> KrbMethodNegotiate off/on<br> KrbMethodK5Passwd off/on<br><br></div>These above are the directives for SSO or password (fetched from kdc database).<br><br></div>
Does nginx support the same way too ?<br><br></div>Thanks in advance.<br><div><div><div><br></div></div></div></div>
<br>_______________________________________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org" target="_blank">nginx@nginx.org</a><br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" target="_blank">http://mailman.nginx.org/mailman/listinfo/nginx</a><br></blockquote></div><br></div>