You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by zux <zu...@pie-dabas.net> on 2016/10/26 12:39:33 UTC
[users@httpd] Require valid-user, still let anyone access page?
Hi,
I have set up mod_auth_kerb to authorize users to a web application.
I would like to let everyone get authorized by kerberos, but if that
fails, they should still be able to access the page (the login page
would be displayed).
If I just add
"Require valid-user"
only kerberos authenticated users can get in.
I have found an almost working solution:
"Require valid-user
<RequireAll>
Require all granted
Require not ip <some local addresses>
</RequireAll>
"
This way, everyone from outside <some local addresses> get a login page,
everyone from those adreses get authenticated by kerberos. But this does
not really work for us.
I have also tried just adding this:
"Require valid-user
Require all granted"
Now, everyone just gets a login page and no one gets authenticated by
kerberos.
ps. adding "KrbMethodK5Passwd On" is not an option - we need the login page.
Can anyone help?
Thanks.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org