Forums » Development »
[Solved] Kerberos/GSSAPI authentication. Patch update.
Added by GrayTShirt over 11 years ago
TLDR: I updated this patch: Issue #1899 to work with 1.4.32.
The updated patch can be found here:
https://raw.github.com/GrayTShirt/phoenix-overlay/master/www-servers/lighttpd/files/lighttpd-1.4.32-gssapi.patch
I was testing an fcgi script and wanted to test http-auth, but I wanted to use my kerberos setup here at home, and the #1899 ticket was the closet thing I could find that worked with lighttpd.
I ensured the patch compiles with and without kerberos support. I also tested functionality.
A few quirks:
spnego doesn't support services with lowercase names, so the prefix in your kerberos principal needs to capitalized (ie the host/http/nfs) part of the principal.
in firefox I had to set the delegation and trusted uris to something better fitting to what I was testing.