I have to mount a SSO to connect to a GLPI application. For some reason NTML don't work, but we managed to get kerberos functionnal.

I would like to authenticate against Kerberos, but if that fails, I want to fallback against application login.

Is that possible ? I'm using Centos 7.5, and apache 2.4.

My current configuration :

AuthType Kerberos
AuthName "Kerberos"
KrbAuthRealms My.DOMAIN
KrbMethodNegotiate on
KrbMethodK5Passwd off
krb5keytab /etc/httpd/keytab/glpi.kerb5.ktab
require valid-user

I tryied to add a require all granted, but that breaks the SSO connection. I would like to force the SSO connection if possible.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.