Project

General

Profile

[Solved] Kerberos/GSSAPI authentication. Patch update.

Added by GrayTShirt over 10 years ago

TLDR: I updated this patch: Issue #1899 to work with 1.4.32.
The updated patch can be found here:
https://raw.github.com/GrayTShirt/phoenix-overlay/master/www-servers/lighttpd/files/lighttpd-1.4.32-gssapi.patch

I was testing an fcgi script and wanted to test http-auth, but I wanted to use my kerberos setup here at home, and the #1899 ticket was the closet thing I could find that worked with lighttpd.
I ensured the patch compiles with and without kerberos support. I also tested functionality.
A few quirks:
spnego doesn't support services with lowercase names, so the prefix in your kerberos principal needs to capitalized (ie the host/http/nfs) part of the principal.
in firefox I had to set the delegation and trusted uris to something better fitting to what I was testing.