Differences

This shows you the differences between two versions of the page.

--- plugin:authad [2024-09-12 19:29] – updated Debian-Install. You can install the meta-package "php-ldap" without the version number 89.183.80.95
+++ plugin:authad [2025-04-01 11:36] (current) – [Web Server] gssapi setup andi
@@ Line 366: / Line 366: @@
   * Review this instruction from start to end. See reference links where possible.
+=== Kerberos via GSSAPI on Apache (Linux) ===
+''mod_auth_kerberos'' has been replaced with ''mod_auth_gssapi'' in newer versions of Apache. The basic setup is the same as above, so follow that guide first. Only the syntax for configuring the module differs. Here's an example to replace the above config:
+<code apache>
+<Directory "/var/www/html/dokuwiki">
+        # Kerberos Auth
+        AuthType GSSAPI
+        AuthName "Kerberos Authentication"
+        GssapiCredStore keytab:/etc/httpd/conf/dokuwiki.HTTP.keytab
+        GssapiAllowedMech krb5
+        GssapiBasicAuth On
+        GssapiBasicAuthMech krb5
+        GssapiLocalName On
+        # If you need to restrict to specific realms
+        # GssapiAcceptorName HTTP/dokuwiki.yourdomain.com
+        Require valid-user
+</Directory>
+</code>
 ==== Browser ====