Forum GLPI-Project

buckleyp

Member

Registered: 2008-06-03

Posts: 3

ntlm and glpi 0.71 RC2

I'm trying to use the NTLM auth pass through on GLPI 0.71 RC2.

I've been following the post "http://glpi-project.org/wiki/doku.php?id=en:authautoad" but due to the change in versions (from 0.68) the patch file no longer works. Failing with rejects.

The NTLM mod is loaded with Apache and set on the website directive, so all I need to do is enable it for glpi. I did see somewhere that this would be included in 0.71 but I might be wrong.

Apache 2.2 running on Ubuntu 7.04, mysql 5.0, glpi 0.71 RC2

Any help would be much appreciated.

Thanks

Peter

MoYo

GLPI - Lead

From: Poitiers

Registered: 2004-09-13

Posts: 14,513

Website

Re: ntlm and glpi 0.71 RC2

Auto Authentification process is now included in the core of GLPI.
You just have to configure it.

---

MoYo - Julien Dombre - Association INDEPNET
Contribute to GLPI :    Support     Contribute     References     Freshmeat

buckleyp

Member

Registered: 2008-06-03

Posts: 3

Re: ntlm and glpi 0.71 RC2

Fantastic, do you know where the options are to configure it are?

Ro9eR

Member

From: Montigny le Bx (78)

Registered: 2007-11-02

Posts: 727

Re: ntlm and glpi 0.71 RC2

setup=> Authentication => Others => "Field holding the login in the _SERVER array"

and "LDAP directory choice"

---

Plateforme de Test: PHPinfo
Version de GLPI: 0.72 & SVN

buckleyp

Member

Registered: 2008-06-03

Posts: 3

Re: ntlm and glpi 0.71 RC2

Really appreciate your help so far.

I've done that but still required to login (I've confirmed LDAP is set up correctly because thats its an AD user I use to login. But its not auto. Are there any further steps?

lune001

Member

Registered: 2008-07-15

Posts: 2

Re: ntlm and glpi 0.71 RC2

I've got the same issue on glpi 0.71 with ubuntu 8.04/apache2/php5
It seem that it's an apache 2 NTLM issue, but no error log help my to find the probleme.
If someone have succefully configure this feature, let us know !
Thank you.

lune001

Member

Registered: 2008-07-15

Posts: 2

Re: ntlm and glpi 0.71 RC2

Ok i've finaly got NTLM working.
here my glpi.cong file from /etc/apache2/conf.d/
<Directory "/var/www/glpi">
PerlAuthenHandler Apache2::AuthenNTLM
AuthType ntlm,basic
AuthName Tembec
require valid-user
PerlAddVar ntdomain "DOMAIN serveurDC1 serveurDC2"
PerlSetVar defaultdomain DOMAIN
PerlSetVar splitdomainprefix 1
PerlSetVar ntlmdebug 2
PerlSetVar ntlmauthoritative off
PerlsetVar basicauth off
</Directory>

With DOMAIN = short name domain
serveurDC1 and serveurDC2 put in /etc/hosts with IP
Be sure to put http:\\nomduserveur\glpi and not http:\\IP\glpi
And evrythink must work

KKill

Member

From: Prague

Registered: 2008-03-12

Posts: 11

Re: ntlm and glpi 0.71 RC2

Hi,
is there any way to get it working on Windows? I'm trying it with  mod_auth_sspi but without success. I'm using GLPI 0.71 on Apache/2.2.4 (Win32) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color mod_auth_sspi/1.0.4 PHP/5.2.4 mod_perl/2.0.3 Perl/v5.8.8.

Thanks for any help.

EDIT: Fixed, sorry :-)

EDIT 2: Nope, not fixed :-( I've put modified files (index.php, login.php and logout.php) from version 0.7.02 to root directory of new version, but than whole glpi is "corrupted" - I cant't submit anything (blank body of the page than and no change). So I've put back original files and now I'm able to login with auth against AD but manually without SSO.

In httpd.conf I have (for mod_auth_sspi):
<Directory "C:/apps/xampp/htdocs/glpi">
  Options None
  Order allow,deny
  Allow from all

  AuthName "Acces restreint"
  AuthType SSPI
  SSPIAuth On
  SSPIAuthoritative On
  SSPIOfferBasic On
  require valid-user
  </Directory>

what was working for previos version. In wiki is configuration for mod_ntlm, but on Windows command prompt refuse to do make install :-)

Could you please advice me?
Thanks a lot.

Last edited by KKill (2008-07-29 17:39:17)

BiFo

Member

Registered: 2008-05-20

Posts: 5

Re: ntlm and glpi 0.71 RC2

setup=> Authentication => Others => "Field holding the login in the _SERVER array"

and "LDAP directory choice"

Hi...
Im using GLPI 0.71 RC3 with Apache and MySQL in a Windows XP Pro SP3.
Its connected with a Domain Controller to Active Directory with LDAP and its working fine.
I go to Setup -> Authentacation -> Others
But in the field "Field holding the login in the _SERVER array" theres not an option called "LDAP directory".
There are:
"HTTP_AUTH_USER"
"REMOTE_USER"
"PHP_AUTH_USER"
"USERNAME"
Non of them give me more options when i choice them, so i dont know how to configure the NTLM Auth.
¿Can someone Help me Plz?

Cya!

PD: Im from Argentina, sorry for my poor English.

BiFo

Member

Registered: 2008-05-20

Posts: 5

Re: ntlm and glpi 0.71 RC2

Any solution to this?
Helppp!

khubbard

Member

Registered: 2008-06-27

Posts: 5

Re: ntlm and glpi 0.71 RC2

Trying to get SSO working as well.

My setup:
Xampp 1.6.8 (Php 5.2.6, Apache 2.2.9, Mysql 5.0.67)
GLPI 1.71.2
mod_auth_ldap
mod_auth_sspi 1.0.4-2.2.2

http.conf:

<IfModule !mod_auth_sspi.c>
LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
#
# Configuration for mod_auth_sspi
<IfModule mod_auth_sspi.c>
    <Directory "D:\apps\xampp\htdocs\glpi">
        AuthName "glpi"
        AuthType SSPI
        SSPIAuth On
        SSPIAuthoritative On
        SSPIOfferBasic On
        # SSPIBasicPreferred
        # SSPIUsernameCase lower
        require valid-user
    </directory>
</IfModule>
# End of mod_auth_sspi.

Any thoughts?

khubbard

Member

Registered: 2008-06-27

Posts: 5

Re: ntlm and glpi 0.71 RC2

Ok, it is now working (!)

Here are the steps for using SSO.  Please note my versions in my previous post.

1 - Download mod_auth_sspi from source forge
2 - extract mod_auth_sspi.so to apache\modules
3 - update httpd.conf w/ the following:

<IfModule !mod_auth_sspi.c>
LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
#
# Configuration for mod_auth_sspi
<IfModule mod_auth_sspi.c>
    <Directory "D:\apps\xampp\htdocs\glpi">
        AuthName "glpi"
        AuthType SSPI
        SSPIAuth On
        SSPIAuthoritative On
        SSPIOfferBasic On
        # SSPIBasicPreferred
        # SSPIUsernameCase lower
        require valid-user
    </directory>
</IfModule>
# End of mod_auth_sspi.

4 - in glpi>setup>authentication>others>Field holding the login in the _SERVER array = REMOTE_USER and LPDAP directory choice = <YOUR LDAP CONNECTION>

All seems to be working fine however I have discovered that I cannot log out and log in w/ eliated credentials.  hmmmm

BiFo

Member

Registered: 2008-05-20

Posts: 5

Re: ntlm and glpi 0.71 RC2

Hi.
I follow your steps, khubbard.
With Internet Explorer it log me in automatically with my Active Directory User.
With Firefox it didnt log me in automatiaclly the first time, but then second works perfectly.

BUT, theres a problem with Firefox:
My users name in Active Directory is: FOlender
I Logged on in GLPI with another user called "Test" the first time, then the second time logs on automatically, i Loggoff. Then i logon again with my AD User (FOlender) because i want Firefox to log me automatically with THIS User, but when i close the windows and open it again, GLPI Log me in with user "Test" Automatically.
¿What can i do?

BMarandola

Member

Registered: 2009-02-18

Posts: 1

Re: ntlm and glpi 0.71 RC2

I not shure if i have to post in here, i m the remplace from BiFo in the company.  BiFo move the GLPI to another server and i have the same problem with respect in GLPI login. I tried to do this:

1 - Download mod_auth_sspi from source forge
2 - extract mod_auth_sspi.so to apache\modules
3 - update httpd.conf w/ the following:

<IfModule !mod_auth_sspi.c>
LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
#
# Configuration for mod_auth_sspi
<IfModule mod_auth_sspi.c>
    <Directory "D:\apps\xampp\htdocs\glpi">
        AuthName "glpi"
        AuthType SSPI
        SSPIAuth On
        SSPIAuthoritative On
        SSPIOfferBasic On
        # SSPIBasicPreferred
        # SSPIUsernameCase lower
        require valid-user
    </directory>
</IfModule>
# End of mod_auth_sspi.

But with a new update for Windows and Event Viewer give me one error with Apache:
Source: Apache Service
Event ID: 3299
The Apache service named  reported the following error:
>>> apache.exe: Syntax error on line 518 of C:/Program Files/OCS Inventory NG/xampp/apache/conf/httpd.conf: Cannot load C:/Program Files/OCS Inventory NG/xampp/apache/modules/mod_auth_sspi.so into server: The specified module could not be found.

And the line 518 is with the code i m adding in the mod_auth_sspi. Anyone can helpme?

JBHoren

Member

From: Fairbanks, AK

Registered: 2010-02-03

Posts: 5

Re: ntlm and glpi 0.71 RC2

I admit to being completely befuddled by the Windows-centric replies :-)

I'm looking for information, in English -- how-to would be great -- for setting-up SSO authentication in GLPI using a mysql database on a local Linux server (RHEL5).

What, exactly (more-or-less), must I add to httpd.conf, etc?

GLPI 0.72.3

Last edited by JBHoren (2010-02-12 21:31:57)

---

Two wrongs don't make a right, but three rights make a left.

gvargasdc

Member

Registered: 2009-10-21

Posts: 34

Re: ntlm and glpi 0.71 RC2

Look in the "tips and tricks" section in the Enlgish user Wiki. There are some entries regarding this for different platforms there.

I wrote an entry there on how I got it working in Fedora Core 10 with Apache and Windows 2003 R2:
Automatic Authentication (SSO) v0.72 - Fedora Core 10

Hope it helps...

---

Glpi: 10.0.1

robbiefpi

Member

From: Italy

Registered: 2010-08-04

Posts: 85

Re: ntlm and glpi 0.71 RC2

I used the configuration explained above from BMarandola but I have the following problems

1. using IE vers. 7 the general user that make a call has a prompt to authenticate to server where GLPI is and then automatic sign on occur. But after he  can't log off.

2. using Firefox 3.6.13 the general user that make a call has a prompt to authenticate to server where GLPI is and then automatic sign on occur. But after he  can't log off.

Using XAMPP 1.7.3, GLPI 0.72.4  Apache 2.2.14 and mod_auth_sspi.so en v.1.0.4-2.2.2

Can you help me?

thanks

MoYo

GLPI - Lead

From: Poitiers

Registered: 2004-09-13

Posts: 14,513

Website

Re: ntlm and glpi 0.71 RC2

robbiefpi :
Please do not post several times.
Create a new topic if needed.
For future abuse you will be banned.

---

MoYo - Julien Dombre - Association INDEPNET
Contribute to GLPI :    Support     Contribute     References     Freshmeat

robbiefpi

Member

From: Italy

Registered: 2010-08-04

Posts: 85

Re: ntlm and glpi 0.71 RC2

excuse me for this behaviour. it wasn't my will to post to do bad action!!

I posted in other threads because in this thread i.e a user had the same problem :logout not working

and in other post, users didn't tell anything about problem logout!

any idea about logout not working?
thanks

roydean

Member

Registered: 2008-04-10

Posts: 12

Re: ntlm and glpi 0.71 RC2

@robbiefpi - here is a set of documentation that I editted after getting SSO working on my installation: http://www.glpi-project.org/wiki/doku.p … ndowserver

My install is Windows XP with XAMPP v1.7.3 for Windows.

Works great!

robbiefpi

Member

From: Italy

Registered: 2010-08-04

Posts: 85

Re: ntlm and glpi 0.71 RC2

Thanks Roy

but  If use the lines in PHP for the $_SERVER['REMOTE_USER'] seems not working. It's empty.

can you tell me whai is needed to do ?
I don't understand the fourth and fifth step of your tutorial.
Where can I find the the apache account under which the service run, if my apache works with XAMPP ?

The authentication continues not to log out! So authentication works but not the logout from the glpi!!

is there any configuration in some file like login.php or logout.php etc ?

thanks!!
Rob

Last edited by robbiefpi (2011-01-25 17:53:43)

Bruce79

Member

Registered: 2012-05-23

Posts: 34

Re: ntlm and glpi 0.71 RC2

I just want to make a remark for the people who use IIS and where REMOTE_USER is empty ...

Under iis go to the site, go to authentication ... and make sure that you disable anonymous access...

second: check windows authentication. (if not available install it using add/remove programs)