SSO Authorization (Windows AD)

Please report bugs here!

Moderator: Thorsten

Post Reply
belkin
Posts: 4
Joined: Thu Mar 09, 2017 9:16 am

SSO Authorization (Windows AD)

Post by belkin » Thu Mar 09, 2017 9:30 am

Hi!
CentOS 6.8 + Apache 2.2 + mod_auth_ntlm_winbind + phpMyFAQ 2.9.6
apache config

Code: Select all

<Location "/">
    NTLMAuth on
    NTLMBasicAuth on
    NTLMBasicRealm DOV.LOCAL
    AuthType NTLM
    AuthName "paipartners"
    NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
    NTLMBasicAuthoritative off
    require valid-user
</Location>
Option Single Sign On Support - ON

MS Internet Explorer Error: Authorization Required
You do not have the required permissions to view the files attached to this post.

Thorsten
Posts: 14438
Joined: Tue Sep 25, 2001 11:14 am
Location: #phpmyfaq
Contact:

Re: SSO Authorization (Windows AD)

Post by Thorsten » Sat Mar 11, 2017 8:33 pm

Hi,

did you get a popup with username/password?

bye
Thorsten
phpMyFAQ Maintainer and Lead Developer
amazon.de Wishlist

belkin
Posts: 4
Joined: Thu Mar 09, 2017 9:16 am

Re: SSO Authorization (Windows AD)

Post by belkin » Sun Mar 12, 2017 8:08 am

No.
The computer is in the MS domain under the control of AD. The password should not be requested, as in the Internet Explorer settings:
1. Tools->Internet Options, in the Internet Options window select the Security tab. Click on the Trusted Sites icon and then click the Sites button. Ensure https://kb.dov.local is added to the Web sites list.
2. Back in the Internet Options->Security tab click the Custom Level button. In the Settings list ensure that User Authentication->Logon is set to Automatic logon with current username and password. Miscellaneous->Web sites in less privileged Web content zones can navigate into this zone is set to Enable.
3. Back in the Internet Options window click the Advanced tab.In the Settings list ensure that Security->Enable Integrated Windows Authentication is set.
4. Exit the Internet Options window, close all instances of Internet Explorer, and retry access.

For other GPLI and RedMine projects, this authorization method works, but for phpmyfaq it does not work.
You do not have the required permissions to view the files attached to this post.

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest