Apache - Configuring mod_auth_sspi.so

3.3k views Asked by At

I am trying to implement an auto login function into my mediawiki by using their windows credentials. I am using Apache Server (V2.2).

I have implemented the Auth remoteuser extension and has implemented the mod_auth_sspi.so in my httpd.conf file and has configure it to be as follows

<IfModule !mod_auth_sspi.c>
    LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
<Location "file/to/path">
    Options FollowSymLinks
    Order allow,deny
    Allow from all
    AuthName "TestWeb"
    AuthType SSPI 
    SSPIAuth On 
    SSPIAuthoritative On
    SSPIOmitDomain On
    SSPIOfferBasic on
    Require valid-user 
</Location>

However, it gives me the prompt to type in the username and password on IE/Firefox/Chrome which I don't want the prompt to appear. I want it to auto login to mediawiki straight without the prompt. Which step am I doing wrong?

How may I achieve the above? Thanks for all assistance!

1

There are 1 answers

0
sashok_bg On

Remove 'SSPIOfferBasic on' and make sure your IE options are set as described here:

Single Sign On with apache on windows 7 and mod_auth_sspi

SSPIOfferBasic means "clients, you can authenticate, using basic auth", so most browsers will chose that instead of SSO/NTLM