GLPI通过ldap实现 AD域用户自动登录相关资料存档

Forum GLPI-Project
Index User list Rules Search Profile Logout [glpi-project.org] [Plugins catalog] [Wiki ] Logged in as hao3w. Last visit Yesterday 16:04:18
New posts Active topics Unanswered topics
Téléchargez la dernière version de GLPI : 0.72.4      -      Et vous, que pouvez vous faire pour le projet GLPI ? : Soutenir          Contribuer
Download last version of GLPI : 0.72.4                      -      What can you do for GLPI ? : Donate       Contribute

--------------------------------------------------------------------------------

ntlm and glpi 0.71 RC2Forum GLPI-Project » English speaking users » ntlm and glpi 0.71 RC2
Pages 1
Post reply

RSS topic feed Subscribe
Posts [ 16 ]
1 Topic by buckleyp 2008-06-03 22:06:09buckleyp
Glpien dubitatif
Offline
Registered: 2008-06-03
Posts: 3
Topic: ntlm and glpi 0.71 RC2I'm trying to use the NTLM auth pass through on GLPI 0.71 RC2.

I've been following the post "http://glpi-project.org/wiki/doku.php?id=en:authautoad" but due to the change in versions (from 0.68) the patch file no longer works. Failing with rejects.

The NTLM mod is loaded with Apache and set on the website directive, so all I need to do is enable it for glpi. I did see somewhere that this would be included in 0.71 but I might be wrong.

Apache 2.2 running on Ubuntu 7.04, mysql 5.0, glpi 0.71 RC2

Any help would be much appreciated.

Thanks

Peter

E-mail buckleyp
Report Post 1 Quote Post 1
2 Reply by MoYo 2008-06-03 23:43:48
MoYo
GLPI - Développeur
Offline
From: Poitiers
Registered: 2004-09-14
Posts: 9,918
Re: ntlm and glpi 0.71 RC2Auto Authentification process is now included in the core of GLPI.
You just have to configure it.

MoYo - Julien Dombre - Association INDEPNET
Contribute to GLPI :    Support     Contribute     References     Freshmeat    GLPI users Map
MoYo's Website E-mail MoYo
Report Post 2 Quote Post 2
3 Reply by buckleyp 2008-06-03 23:47:45buckleyp
Glpien dubitatif
Offline
Registered: 2008-06-03
Posts: 3
Re: ntlm and glpi 0.71 RC2Fantastic, do you know where the options are to configure it are?

E-mail buckleyp
Report Post 3 Quote Post 3
4 Reply by Ro9eR 2008-06-03 23:51:39
Ro9eR
Glpien expert
Offline
From: Montigny le Bx (78)
Registered: 2007-11-02
Posts: 700
Re: ntlm and glpi 0.71 RC2setup=> Authentication => Others => "Field holding the login in the _SERVER array"

and "LDAP directory choice"

Plateforme de Test: PHPinfo
Version de GLPI: 0.72 & SVN
E-mail Ro9eR
Report Post 4 Quote Post 4
5 Reply by buckleyp 2008-06-04 00:42:28buckleyp
Glpien dubitatif
Offline
Registered: 2008-06-03
Posts: 3
Re: ntlm and glpi 0.71 RC2Really appreciate your help so far.

I've done that but still required to login (I've confirmed LDAP is set up correctly because thats its an AD user I use to login. But its not auto. Are there any further steps?

E-mail buckleyp
Report Post 5 Quote Post 5
6 Reply by lune001 2008-07-15 23:58:18lune001
Glpien dubitatif
Offline
Registered: 2008-07-15
Posts: 2
Re: ntlm and glpi 0.71 RC2I've got the same issue on glpi 0.71 with ubuntu 8.04/apache2/php5
It seem that it's an apache 2 NTLM issue, but no error log help my to find the probleme.
If someone have succefully configure this feature, let us know !
Thank you.

E-mail lune001
Report Post 6 Quote Post 6
7 Reply by lune001 2008-07-24 16:44:36lune001
Glpien dubitatif
Offline
Registered: 2008-07-15
Posts: 2
Re: ntlm and glpi 0.71 RC2Ok i've finaly got NTLM working.
here my glpi.cong file from /etc/apache2/conf.d/
<Directory "/var/www/glpi">
PerlAuthenHandler Apache2::AuthenNTLM
AuthType ntlm,basic
AuthName Tembec
require valid-user
PerlAddVar ntdomain "DOMAIN serveurDC1 serveurDC2"
PerlSetVar defaultdomain DOMAIN
PerlSetVar splitdomainprefix 1
PerlSetVar ntlmdebug 2
PerlSetVar ntlmauthoritative off
PerlsetVar basicauth off
</Directory>

With DOMAIN = short name domain
serveurDC1 and serveurDC2 put in /etc/hosts with IP
Be sure to put http:\\nomduserveur\glpi and not http:\\IP\glpi
And evrythink must work

E-mail lune001
Report Post 7 Quote Post 7
8 Reply by KKill 2008-07-29 16:08:21KKill
Glpien curieux
Offline
From: Prague
Registered: 2008-03-12
Posts: 11
Re: ntlm and glpi 0.71 RC2Hi,
is there any way to get it working on Windows? I'm trying it with  mod_auth_sspi but without success. I'm using GLPI 0.71 on Apache/2.2.4 (Win32) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color mod_auth_sspi/1.0.4 PHP/5.2.4 mod_perl/2.0.3 Perl/v5.8.8.

Thanks for any help.

EDIT: Fixed, sorry :-)

EDIT 2: Nope, not fixed :-( I've put modified files (index.php, login.php and logout.php) from version 0.7.02 to root directory of new version, but than whole glpi is "corrupted" - I cant't submit anything (blank body of the page than and no change). So I've put back original files and now I'm able to login with auth against AD but manually without SSO.

In httpd.conf I have (for mod_auth_sspi):
<Directory "C:/apps/xampp/htdocs/glpi">
  Options None
  order allow,deny
  Allow from all

  AuthName "Acces restreint"
  AuthType SSPI
  SSPIAuth On
  SSPIAuthoritative On
  SSPIOfferBasic On
  require valid-user
  </Directory>

what was working for previos version. In wiki is configuration for mod_ntlm, but on Windows command prompt refuse to do make install :-)

Could you please advice me?
Thanks a lot.

Last edited by KKill (2008-07-29 23:39:17)

E-mail KKill
Report Post 8 Quote Post 8
9 Reply by BiFo 2008-09-12 01:30:02BiFo
Glpien amateur
Offline
Registered: 2008-05-20
Posts: 5
Re: ntlm and glpi 0.71 RC2Ro9eR wrote:
setup=> Authentication => Others => "Field holding the login in the _SERVER array"

and "LDAP directory choice"
Hi...
Im using GLPI 0.71 RC3 with Apache and MySQL in a Windows XP Pro SP3.
Its connected with a Domain Controller to Active Directory with LDAP and its working fine.
I go to Setup -> Authentacation -> Others
But in the field "Field holding the login in the _SERVER array" theres not an option called "LDAP directory".
There are:
"HTTP_AUTH_USER"
"REMOTE_USER"
"PHP_AUTH_USER"
"USERNAME"
Non of them give me more options when i choice them, so i dont know how to configure the NTLM Auth.
¿Can someone Help me Plz?

Cya!

PD: Im from Argentina, sorry for my poor English.

Report Post 9 Quote Post 9
10 Reply by BiFo 2008-09-24 03:03:17BiFo
Glpien amateur
Offline
Registered: 2008-05-20
Posts: 5
Re: ntlm and glpi 0.71 RC2Any solution to this?
Helppp!

Report Post 10 Quote Post 10
11 Reply by khubbard 2008-10-15 23:01:35khubbard
Glpien amateur
Offline
Registered: 2008-06-28
Posts: 5
Re: ntlm and glpi 0.71 RC2Trying to get SSO working as well.

My setup:
Xampp 1.6.8 (Php 5.2.6, Apache 2.2.9, Mysql 5.0.67)
GLPI 1.71.2
mod_auth_ldap
mod_auth_sspi 1.0.4-2.2.2

http.conf:

<IfModule !mod_auth_sspi.c>
LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
#
# Configuration for mod_auth_sspi
<IfModule mod_auth_sspi.c>
    <Directory "D:\apps\xampp\htdocs\glpi">
        AuthName "glpi"
        AuthType SSPI
        SSPIAuth On
        SSPIAuthoritative On
        SSPIOfferBasic On
        # SSPIBasicPreferred
        # SSPIUsernameCase lower
        require valid-user
    </directory>
</IfModule>
# End of mod_auth_sspi.



Any thoughts?

E-mail khubbard
Report Post 11 Quote Post 11
12 Reply by khubbard 2008-10-15 23:20:02khubbard
Glpien amateur
Offline
Registered: 2008-06-28
Posts: 5
Re: ntlm and glpi 0.71 RC2Ok, it is now working (!)

Here are the steps for using SSO.  Please note my versions in my previous post.

1 - Download mod_auth_sspi from source forge
2 - extract mod_auth_sspi.so to apache\modules
3 - update httpd.conf w/ the following:

<IfModule !mod_auth_sspi.c>
LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
#
# Configuration for mod_auth_sspi
<IfModule mod_auth_sspi.c>
    <Directory "D:\apps\xampp\htdocs\glpi">
        AuthName "glpi"
        AuthType SSPI
        SSPIAuth On
        SSPIAuthoritative On
        SSPIOfferBasic On
        # SSPIBasicPreferred
        # SSPIUsernameCase lower
        require valid-user
    </directory>
</IfModule>
# End of mod_auth_sspi.

4 - in glpi>setup>authentication>others>Field holding the login in the _SERVER array = REMOTE_USER and LPDAP directory choice = <YOUR LDAP CONNECTION>



All seems to be working fine however I have discovered that I cannot log out and log in w/ eliated credentials.  hmmmm

E-mail khubbard
Report Post 12 Quote Post 12
13 Reply by BiFo 2008-10-29 21:21:38BiFo
Glpien amateur
Offline
Registered: 2008-05-20
Posts: 5
Re: ntlm and glpi 0.71 RC2Hi.
I follow your steps, khubbard.
With Internet Explorer it log me in automatically with my Active Directory User.
With Firefox it didnt log me in automatiaclly the first time, but then second works perfectly.

BUT, theres a problem with Firefox:
My users name in Active Directory is: FOlender
I Logged on in GLPI with another user called "Test" the first time, then the second time logs on automatically, i Loggoff. Then i logon again with my AD User (FOlender) because i want Firefox to log me automatically with THIS User, but when i close the windows and open it again, GLPI Log me in with user "Test" Automatically.
¿What can i do?

Report Post 13 Quote Post 13
14 Reply by BMarandola 2009-02-18 21:17:27BMarandola
Glpien dubitatif
Offline
Registered: 2009-02-18
Posts: 1
Re: ntlm and glpi 0.71 RC2I not shure if i have to post in here, i m the remplace from BiFo in the company.  BiFo move the GLPI to another server and i have the same problem with respect in GLPI login. I tried to do this:

1 - Download mod_auth_sspi from source forge
2 - extract mod_auth_sspi.so to apache\modules
3 - update httpd.conf w/ the following:

<IfModule !mod_auth_sspi.c>
LoadModule sspi_auth_module modules/mod_auth_sspi.so
</IfModule>
#
# Configuration for mod_auth_sspi
<IfModule mod_auth_sspi.c>
    <Directory "D:\apps\xampp\htdocs\glpi">
        AuthName "glpi"
        AuthType SSPI
        SSPIAuth On
        SSPIAuthoritative On
        SSPIOfferBasic On
        # SSPIBasicPreferred
        # SSPIUsernameCase lower
        require valid-user
    </directory>
</IfModule>
# End of mod_auth_sspi.

But with a new update for Windows and Event Viewer give me one error with Apache:
Source: Apache Service
Event ID: 3299
The Apache service named  reported the following error:
>>> apache.exe: Syntax error on line 518 of C:/Program Files/OCS Inventory NG/xampp/apache/conf/httpd.conf: Cannot load C:/Program Files/OCS Inventory NG/xampp/apache/modules/mod_auth_sspi.so into server: The specified module could not be found.

And the line 518 is with the code i m adding in the mod_auth_sspi. Anyone can helpme?

E-mail BMarandola
Report Post 14 Quote Post 14
15 Reply by JBHoren 2010-02-13 03:29:32
JBHoren
Glpien amateur
Offline
From: Fairbanks, AK
Registered: 2010-02-03
Posts: 5
Re: ntlm and glpi 0.71 RC2I admit to being completely befuddled by the Windows-centric replies :-)

I'm looking for information, in English -- how-to would be great -- for setting-up SSO authentication in GLPI using a mysql database on a local Linux server (RHEL5).

What, exactly (more-or-less), must I add to httpd.conf, etc?

GLPI 0.72.3

Last edited by JBHoren (2010-02-13 03:31:57)

Two wrongs don't make a right, but three rights make a left.
E-mail JBHoren
Report Post 15 Quote Post 15
16 Reply by gvargasdc 2010-02-13 06:11:31gvargasdc
Glpien curieux
Offline
Registered: 2009-10-21
Posts: 20
Re: ntlm and glpi 0.71 RC2Look in the "tips and tricks" section in the Enlgish user Wiki. There are some entries regarding this for different platforms there.

I wrote an entry there on how I got it working in Fedora Core 10 with Apache and Windows 2003 R2:
Automatic Authentication (SSO) v0.72 - Fedora Core 10

Hope it helps...

GLPI 0.72.3 | Fedora Core 11 | Apache 2.2.13 | PHP 5.2.11 | MySQL  5.1.37
E-mail gvargasdc
Report Post 16 Quote Post 16


All for authentication via ldap to login automatically!!

文章来自: 本站原创
引用通告: 查看所有引用 | 我要引用此文章
Tags:
相关日志: