Topic: Use mod sspi

[nagella]

The certificates is ok and also working fine in Firefox 8.0.1,but not working in IE.


if I include this line
“LoadModule sspi_auth_module modules/mod_auth_sspi.so”
In httpd.conf file , it will ask credential but after entering credentials its showing message like

Authorization is required.

So can you please suggest ....

[Steffen]

Please search the forum with sspi to get more insight.

Steffen

[James Blond]

Why do you want to enable mod sspi? This has nothing do to with SSL
Mod SSPI is for auth against Windows accounts.

[nagella]

I need to authenticate the yours using sspi so i am using this module.Can you please suggest me..

[wm003]

Could you post your sspi config?

SSPIPackage
SSPIAuth
SSPIAuthoritative
SSPIPerRequestAuth
SSPIOfferBasic
SSPIBasicPreferred
SSPIUsernameCase lower
require valid-user

??
Which Version of sspi are you using? 1.0.4 ? there is a 1.0.5 around which has some bugs fixed concerning IE. But that was mainly for POST and keepalive stuff

[nagella]

mod_auth_sspi-1.0.4-2.2.2 this is my version


mod_auth_sspi-1.0.4-2.2.2.zip got this zip file, extracted copied mod_auth_sspi into apache/modules

<IfModule mod_auth_sspi.c>
AuthName "sitename.sometext.com"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIOfferBasic On
SSPIBasicPreferred On
#SSPIUsernameCase lower
SSPIDomain sometext.com
require valid-user
</IfModule>



I have query , i need to extravt all the mod_auth_sspi-1.0.4-2.2.2.zip into my apache/modules folder?

[glsmith]

my suggestion is to make sure you use at minimum Require usernames, instead of "valid-user" .. if you use "valid-user" .. on some versions of Windows, just clicking OK on a blank username/password prompt will allow you in.

[nagella]

Please let me know how to configure for limited users because i am not aware of server configurations.But i dont know who are the users.So i need to configure for all users who have the sometext.com domain enterprise id and password.

[nagella]

After commenting fallowing 3 lines its working in IE also....

At time time of Error the code is as fallows

BrowserMatch ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

After problem solved

#BrowserMatch ".*MSIE.*" \
#nokeepalive ssl-unclean-shutdown \
#downgrade-1.0 force-response-1.0

[Steffen]

I am a little stumbled. The Topic is about mod_auth_sspi, and as James says above, this has nothing do to with SSL.

I am not familiar with mod_auth_sspi. Now you are referring to the SSL-BrowserMatch as problem solved ? Or did you have a general issue with SSL and IE ?

[nagella]

actually i started with mod_auth_sspi only i.e its working fine in Firefox but its not worked in IE ,so james given some suggestions but exact problem is with the fallowing lines

BrowserMatch ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

due to this its not working in IE so commented , after that its working fine..