Ask Your Question
0

mod_auth_kerb missing in Fedora 27/28

asked 2018-07-16 02:49:35 -0500

Luxus gravatar image

updated 2018-07-16 07:10:04 -0500

Hello,

I'm currently trying to configure Kerberos authentication in Apache. All manuals I found say that I need to install modauthkerb but this package is not available in both Fedora 27 and Fedora28.

I tried searching for the package with the following command but I'm unable to find the correct package:

dnf provides */mod_auth_kerb.so

My current apache configuration is as follows:

<VirtualHost *:80>
  ServerName wiki.domain.com
  Documentroot /var/www/dokuwiki

  <Directory "/var/www/dokuwiki">
    AuthType Kerberos
    KrbAuthRealms DOMAIN.LOCAL
    KrbServiceName HTTP/wiki.domain.com
    Krb5Keytab /etc/httpd/conf/dokuwiki.HTTP.keytab
    KrbMethodNegotiate on
    KrbMethodK5Passwd on
    require valid-user

    AllowOverride all
    Options +Indexes
  </Directory>
</VirtualHost>

When trying to start apache with this config I receive the following errors:

Jul 16 09:27:14 FVM.vh2.local audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:syste>
Jul 16 09:27:14 FVM.vh2.local httpd[995]: AH00526: Syntax error on line 9 of /etc/httpd/conf.d/dokuwiki.conf:
Jul 16 09:27:14 FVM.vh2.local httpd[995]: Invalid command 'KrbAuthRealms', perhaps misspelled or defined by a module>
Jul 16 09:27:14 FVM.vh2.local systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE
Jul 16 09:27:14 FVM.vh2.local systemd[1]: httpd.service: Failed with result 'exit-code'.
Jul 16 09:27:14 FVM.vh2.local systemd[1]: Failed to start The Apache HTTP Server.
-- Subject: Unit httpd.service has failed
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has failed.
--
-- The result is RESULT.
Jul 16 09:27:14 FVM.vh2.local audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:syste>

What is the correct way to configure Apache with Kerberos in Fedora 27/28.

Best regards, Luc

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
1

answered 2018-07-16 08:03:31 -0500

fcomida gravatar image

mod_auth_kerb has been replaced by mod_auth_gssapi README on GitHub.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2018-07-16 02:49:35 -0500

Seen: 210 times

Last updated: Jul 16 '18