You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Antoine Bourbaki <au...@gmail.com> on 2009/03/13 06:20:31 UTC

native kerberos authn

Greetings all,

I would like to ask if there are any plans to natively integrate kerberos 5
authentication into the httpd aaa modules tree. There seems to be quite
a lot of interest on that, along with a large user base (mostly large Windows
AD installations, but pure KRB5 sites too).

Apologies if this has been brought up before, but I have been unable to locate
any previous discussion on this, on the list archives.

I am actually very interested in contributing time and code toward
this effort, and
my current plans are to bring mod_auth_kerb up to date and properly integrate
it with the current apache httpd tree.

Any thoughts?

./AB

Re: native kerberos authn

Posted by Nick Kew <ni...@webthing.com>.
On 13 Mar 2009, at 05:20, Antoine Bourbaki wrote:

> Greetings all,
>
> I would like to ask if there are any plans to natively integrate  
> kerberos 5
> authentication into the httpd aaa modules tree. There seems to be  
> quite
> a lot of interest on that, along with a large user base (mostly  
> large Windows
> AD installations, but pure KRB5 sites too).
>
> Apologies if this has been brought up before, but I have been  
> unable to locate
> any previous discussion on this, on the list archives.
>
> I am actually very interested in contributing time and code toward
> this effort, and
> my current plans are to bring mod_auth_kerb up to date and properly  
> integrate
> it with the current apache httpd tree.

I don't see your name listed on the mod_auth_kerb page at sourceforge.
What's your relationship with the current developer/maintainer
(or did you mean a different mod_auth_kerb?)

This is important, because even if it's already under the Apache  
license,
we don't really want to fork someone else's project in competition with
the original developers.  That leads to maintenance nightmares, and
confusion for end-users.

-- 
Nick Kew