Topic: mod_auth_sspi.so

[r_hauser]

Hallo,

I use Apache 2.2.0 and I have problems with mod_auth_sspi.so.
(mod_auth_sspi/1.0.4 from Source: http://www.gknw.at/development/apache/httpd-2.0/win32/modules/ ).

The auto login won't work.

The following error message was reportet:

Authorization Required
This server could not verify that you are authorized to access the document
requested. Either you supplied the wrong credentials (e.g., bad password),
or your browser doesn't understand how to supply the credentials required.

Additionally, a 401 Authorization Required error was encountered while
trying to use an ErrorDocument to handle the
request.


--------------------------------------------------------------------------------

In error.log I found the following text :

[Tue Apr 25 10:09:43 2006] [notice] Apache/2.2.0 (Win32) DAV/2 mod_autoindex_color mod_auth_sspi/1.0.4 PHP/5.1.1 configured -- resuming normal operations
[Tue Apr 25 10:09:43 2006] [notice] Server built: Dec 1 2005 18:36:53
[Tue Apr 25 10:09:43 2006] [notice] Parent: Created child process 3636
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module actions_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module alias_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module asis_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module auth_basic_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module authn_default_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module authn_file_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module authz_default_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module authz_groupfile_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module authz_host_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module authz_user_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module cgi_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module dav_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module dav_fs_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module dir_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module env_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module include_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module info_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module isapi_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module ldap_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module log_config_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module mime_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module negotiation_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module setenvif_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module status_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module autoindex_color_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module sspi_auth_module
[Tue Apr 25 10:09:43 2006] [debug] mod_so.c(246): loaded module php5_module
[Tue Apr 25 10:09:43 2006] [notice] Child 3636: Child process is running
[Tue Apr 25 10:09:43 2006] [notice] Child 3636: Acquired the start mutex.
[Tue Apr 25 10:09:43 2006] [notice] Child 3636: Starting 250 worker threads.
[Tue Apr 25 10:09:44 2006] [notice] Child 3636: Starting thread to listen on port 80.
[Tue Apr 25 10:13:43 2006] [error] [client 127.0.0.1] (OS 87)Falscher Parameter. : authentication failure for "/error/HTTP_UNAUTHORIZED.html.var": user unknown, reason: cannot generate context

---------------------------------------------------------
httpd.conf
....
LoadModule sspi_auth_module modules/mod_auth_sspi.so

# Configuration for mod_auth_sspi
<IfModule mod_auth_sspi.c>
<Location /protected/>
AuthName "A Protected Place"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIOfferBasic On
SSPIBasicPreferred On

require valid-user
</Location>
</IfModule>
# End of mod_auth_sspi.
# ***

....
<Directory />
Options FollowSymLinks
AllowOverride None

# *** NT-Authentification
AuthName "Login!"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On

require valid-user
</Directory>
--------------------------------------------------



Thanks
Reinhold