基于Apache2的windows集成认证

最新推荐文章于 2019-07-18 10:36:08 发布

原创最新推荐文章于 2019-07-18 10:36:08 发布 · 599 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#apache #windows #domain #authentication #variables #basic

本文介绍如何使用AuthenNTLM为Apache2配置NTLM集成认证。步骤包括安装必要的Perl模块、下载并编译AuthenNTLM、配置Apache以启用KeepAlive等功能、设置NTLM认证参数等。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

昨天占了个坑，今天来编辑

我这次选用的是AuthenNTLM来做Apache2的集成认证工具

1. 安装Perl 模块用于编译安装 AuthenNTLM （我的OS是Ubuntu）
aptitude install libapache2-mod-perl

2. 下载AuthenNTLM

http://search.cpan.org/~speeves/Apache-AuthenNTLM-2.10

过程很common

make

make install

3. 安装

aptitude install libapache2-authenntlm-perl

4. Edit the Apache configuration and enable KeepAlive /etc/apache2/apche2.conf

KeepAlive On

5. 在hosts（/etc/hosts）文件中编辑PDC (原因： NTLM只能识别不超过16字节的域名)

172.16.5.1 PDC01

6. In /etc/apache2/sites-available/000-default add:

Alias /iwa "/home/yangchun/yangchun_kss/iwa/"
    <Location "/iwa">
        # Enable the Authentication module
        PerlAuthenHandler Apache2::AuthenNTLM

        # Do NTLM and basic authentication
        AuthType ntlm,basic

        # The name that should be displayed in the Auth box, if NTLM fails.
        # This will not succeed on our setup where apache is not configured to authenticate on its own
        AuthName hengtiansoftcom

        # Ask for a valid user.
        require valid-user

        #                    domain      pdc         bdc
        # Domain : Your windows domain
        # pdc : Primary Domain Controller
        # bdc : Backup Domain controller.
        #
        # Note : Multiple domains can be specified.

        #PerlAddVar ntdomain "OURDOMAIN domainpdc domainsdc"
        PerlAddVar ntdomain "Domain PDC01 PDC02"

        # What should be the default domain
        PerlSetVar defaultdomain Domain

        # The user names are in the form "OURDOMAIN\user_name". Let us split it.
        PerlSetVar splitdomainprefix 1

        # Set the debug variables
        PerlSetVar ntlmdebug 0
        PerlSetVar ntlmauthoritative off

   </Location>

7 重启，这样可以得到REMOTE_USER 变量用于验证