HI Admin Automatic authentication for active directory user?

a7bharani · 2011-04-26 08:34:17

Please update automatic authentication for active directory user to login without user name and password.
For all server windows, mac Os, Linux. IE, Firefox, safari etc..

Is their any solution ?

here My system information.

Operating Systems : Linux domain.local 2.6.18-164.el5xen #1 SMP Thu Sep 3 04:47:32 EDT 2009 i686
PHP 5.1.6 (PDO, PDO_ODBC, Reflection, SPL, SimpleXML, apache2handler, bz2, calendar, ctype, curl, date, dbase, exif, ftp,
gettext, gmp, hash, iconv, json, ldap, libxml, mbstring, mime_magic, mysql, mysqli, odbc, openssl, pcre, pdo_mysql, pdo_pgsql,
pdo_sqlite, pgsql, posix, pspell, session, shmop, sockets, standard, sysvmsg, sysvsem, sysvshm, tokenizer, wddx, xml, zlib)
Setup: memory_limit="160M" max_execution_time="130" safe_mode="" session.save_handler="files" post_max_size="200M"
upload_max_filesize="200M"
Software: Apache/2.2.3 (CentOS) (Apache/2.2.3 (CentOS) Server at 172.16.12.202 Port 80)
Mozilla/5.0 (Windows NT 5.1; rv:2.0) Gecko/20100101 Firefox/4.0
MySQL: 5.0.77 (root@localhost/glpi)

wawa · 2011-04-26 09:42:25

without name or password ?
it's not an authentication anymore, and how can you manage to connect to glpi without username ??

a7bharani · 2011-04-26 10:40:22

without name or password ?
it's not an authentication anymore, and how can you manage to connect to glpi without username ??

HI,

while we login system to use (ldap) user automatic login to glpi project.

possible to work in IE For automatic authentication but i need to work all browser. now working windows system only. we have mac os system. how to config mac system for automatic Login

wawa · 2011-04-26 22:30:00

I've got no idea how to do it, and it seems not a glpi problematic, but more a web SSO one !

scmi · 2011-04-27 08:08:04

Hi,
we use Kerberos Authentication. It's work with various web browsers (Safari,FF, etc). UNIX/Linux machines already have their firefox installations properly configured for Kerberos authentication, no further configuration is necessary. FF under Windows you need some change in "about:config"
Safari supports Kerberos authentication without any additional configuration.
Opera does not currently support Kerberos authentication!!

a7bharani · 2011-05-04 14:21:29

Hi all,

Thank u for your reply.

I config for automatic authentication successfully. while they login windows or mac or Linux machine automatic login to

glpi project with current system login users .

get system lo gin name and change the setting in login.php

inc auth.class.php

now we use both ldap user and automatic login system.

sankan101 · 2011-05-09 08:43:32

Hi a7bharani,

How did you setup Kerberos ?

I am having problem with auto login for months.

Config as below, please let me know if something is wrong.

Apache, CentOS Linux, Wants to use LDAP authentication for auto login.

_________________________________
/etc/krb5.conf -- looks like this

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
ticket_lifetime = 24000
default_realm = example.com
dns_lookup_realm = false
dns_lookup_kdc = false

[realms]
example.com = {
default_domain = example.com
kdc = server1.example.com:88
admin_server = server2.example.com:749
}

[domain_realm]
.example.com = EXAMPLE.com
example.com = EXAMPLE.com

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}

___________________

/etc/httpd/conf/httpd.conf looks like this

LoadModule auth_kerb_module modules/mod_auth_kerb.so

<Directory "/var/www/html/test">
AuthName "Kerberos Login"
AuthType Kerberos
Krb5Keytab /usr/share/xyz/auth_kerb.keytab
KrbAuthRealm EXAMPLE.com
KrbMethodNegotiate off
KrbSaveCredentials off
KrbVerifyKDC off
Require valid-user
</Directory>

_________________

/usr/share/xyz/auth_kerb.keytab looks like this

HTTP/centosserver.Example.com@my_email_domain.com
__________________

Now, when I have this config - a pop up comes up and asking for UN/PW - it doesnt accept my LDAP username and password and keeps on popping up. I would like to have it automatically login.

What am I doing wrong?

Please help ....................

alucado · 2011-08-18 04:31:42

Hi sankan101,

I config kerberos with sso and ldap auth on glpi. the both works fine, but there is a problem

While I import AD users via ldap, all user name ( loginid ) like cnalli without domain name, but glpi will generate a a new user name with cnalli@xxx.com when I open glpi with sso. so two username exist on GLPI.
cnalli and cnalli@xxx.com.

cnalli have all of AD detail information obtain from DC via LDAP
cnalli@xxx.com is just username without any other detail information come from kerberos.

How combine two accounts to the one ?

krotee · 2013-06-28 16:27:05

Hey, sankan101

Now, when I have this config - a pop up comes up and asking for UN/PW - it doesnt accept my LDAP username and password and keeps on popping up. I would like to have it automatically login.

did you find the answer?
I cant understand what the USER/PW it need??

Last edited by krotee (2013-06-28 16:28:11)

Forum GLPI-Project

Announcement

#1 2011-04-26 08:34:17

HI Admin Automatic authentication for active directory user?

#2 2011-04-26 09:42:25

Re: HI Admin Automatic authentication for active directory user?

#3 2011-04-26 10:40:22

Re: HI Admin Automatic authentication for active directory user?

#4 2011-04-26 22:30:00

Re: HI Admin Automatic authentication for active directory user?

#5 2011-04-27 08:08:04

Re: HI Admin Automatic authentication for active directory user?

#6 2011-05-04 14:21:29

Re: HI Admin Automatic authentication for active directory user?

#7 2011-05-09 08:43:32

Re: HI Admin Automatic authentication for active directory user?

#8 2011-08-18 04:31:42

Re: HI Admin Automatic authentication for active directory user?

#9 2013-06-28 16:27:05

Re: HI Admin Automatic authentication for active directory user?

Board footer