Would it be possible to implement krb5?

statusengine / interface

AngularJS based Web Interface for Statusengine

https://statusengine.org/ui/#overview

GNU General Public License v3.0

18 stars 7 forks source link

Would it be possible to implement krb5? #31

Closed nishitjpatel closed 4 years ago

nishitjpatel commented 4 years ago

I am looking to use kerberos for authentication. looks like it is not currently possible with ldap.php.

nook24 commented 4 years ago

I never used Kerberos but it should not be super hard to implement because the web server handles all the authentication part. Is this correct? A quick Google search came up with libapache2-mod-auth-kerb

So basically you can use Kerberos out of the box by configure your apache to handle the authentication and enable anonymous access in Statusengine's config. How ever this comes with the small disadvantaged that all external commands will show Anonymous as author.

I will take a look at this over the weekend...

nishitjpatel commented 4 years ago

Thanks. I am using mod_auth_kerb (redhat) for thruk/naemon and getting in as user identified in active directory. i would like author to show as correct users not anonymous

nook24 commented 4 years ago

Could you please post what's inside of the header REMOTE_USER ?

<?php
echo $_SERVER['AUTH_TYPE'];
echo "<br/>";
echo $_SERVER['REMOTE_USER'];
echo "<br/>";

I don't have an AD at home :)

Please with enabled KrbLocalUserMapping

nook24 commented 4 years ago

Please reopen this, if it's still a thing