Activity for Kerberos Module For Apache

Adrian Wijas modified a comment on ticket #31

Adrian Wijas — Wed, 05 Apr 2023 12:51:41 -0000

Problem is that macro APLOG_MARK in apache < 2.3.9 expands to two values: file and line. But in newer versions it expands to three values: file, line and module index. To solve this problem change signature of mod_auth_kerb.c:log_rerror() to: log_rerror(const char *file, int line, int module_index, int level, int status, const request_rec *r, const char *fmt, ...) // module_index added And change call of ap_log_rerror() to: ap_log_rerror(file, line, module_index, level | APLOG_NOERRNO, status, r,...

Adrian Wijas posted a comment on ticket #31

Adrian Wijas — Wed, 05 Apr 2023 12:18:55 -0000

Problem is that macro APLOG_MARK in apache < 2.3.9 expands to two values: file and line. But in newer versions it expands to three values: file, line and module index. To solve this problem change signature of mod_auth_kerb.c:log_rerror() to: log_rerror(const char file, int line, int module_index, int level, int status, const request_rec r, const char *fmt, ...) // module_index added And change call of ap_log_rerror() to: ap_log_rerror(file, line, module_index, level | APLOG_NOERRNO, status, r, "%s",...

Joakim Tjernlund posted a comment on ticket #62

Joakim Tjernlund — Tue, 02 Mar 2021 17:44:24 -0000

I replaced the patch in ticket #61 with this instead(quite some time ago): ``` --- ./src/mod_auth_kerb.c.org 2020-08-13 17:30:15.901691505 +0200 +++ ./src/mod_auth_kerb.c 2020-08-13 17:35:00.069621299 +0200 @@ -2062,6 +2062,11 @@ static int have_rcache_type(const char type) { + / rcache "none" is always present in modern mit-krb5 + * but krb5_rc_resolve_full() has been removed in 1.18.x + * so hardcode to true */ + return 1; +#if 0 krb5_error_code ret; krb5_context context; krb5_rcache id = NULL;...

Sam Hartman created ticket #62

Sam Hartman — Fri, 20 Nov 2020 20:17:23 -0000

Fails to build with MIT Kerberos 1.18

Joakim Tjernlund posted a comment on ticket #61

Joakim Tjernlund — Wed, 12 Aug 2020 16:00:16 -0000

This makes mod_auth_kerb load when built against mit-krb5-1.18.2 Not run tested yet

Paul Wise posted a comment on ticket #61

Paul Wise — Mon, 21 Oct 2019 03:49:23 -0000

FYI I've just added this patch to the Debian package of mod_auth_kerb in response to Debian bug #934043.

Fabian Grutschus posted a comment on ticket #31

Fabian Grutschus — Mon, 21 Jan 2019 15:48:28 -0000

Hello, I guess the package isn't maintained anymore. I've the same problems compiling mod_auth_kerb inside a Alpine Docker image. The Alpine projects seem to maintain the package by their own and you can find the patches here: https://git.alpinelinux.org/aports/tree/main/apache-mod-auth-kerb?id=ae380974c20d60217bedada8747089dbc1409609 Maybe you can find the same files for Debian/Ubuntu too.

Johan Ymerson created ticket #61

Johan Ymerson — Thu, 13 Dec 2018 08:59:29 -0000

Use after free in authenticate_user_krb5pwd()

Najmi Nasir created ticket #31

Najmi Nasir — Thu, 26 Apr 2018 05:56:30 -0000

Fail during compiling mod apache

Darryl Blonski created ticket #30

Darryl Blonski — Wed, 10 Jan 2018 20:10:58 -0000

Question about handling of Kerberos Tickets.

Anonymous modified a comment on ticket #12

Anonymous — Thu, 20 Jul 2017 12:47:22 -0000

How was this solved? I cannot find the apache configuration directive to use in order to strip the @realm from the uid. Does anyone know? Thank you in advance!

Nick Pierpoint posted a comment on ticket #14

Nick Pierpoint — Sat, 17 Jun 2017 14:33:36 -0000

Did this ever progress? Any hope of Kerberos falling back to NTLMv2 authentication?

Mathieu Bouchard created ticket #29

Mathieu Bouchard — Fri, 10 Mar 2017 18:13:33 -0000

Kerberos service name configuration

olivier girard created ticket #28

olivier girard — Mon, 23 Jan 2017 14:23:35 -0000

constrained delegation

chris posted a comment on ticket #60

chris — Wed, 23 Nov 2016 17:06:38 -0000

Looks like this should be done somewhere in function authenticate_user_krb5pwd, where...

chris created ticket #60

chris — Wed, 23 Nov 2016 16:59:29 -0000

Strim REALM\ in username

Developer posted a comment on ticket #27

Developer — Tue, 04 Oct 2016 18:18:36 -0000

Michael Thank you so much for you help.

Michael Weber posted a comment on ticket #27

Michael Weber — Wed, 28 Sep 2016 18:36:06 -0000

Certainly. On the sourceforge page for the Kerberos Module for Apache, click Support,...

Developer posted a comment on ticket #27

Developer — Wed, 28 Sep 2016 16:21:29 -0000

Hello Michael. Could you post information about the patch for Apache 2.4 that you...

Michael Weber posted a comment on ticket #27

Michael Weber — Wed, 14 Sep 2016 01:37:12 -0000

Nevermind. I found the patch for Apache 2.4 and it fixed it. Please close this t...

Michael Weber created ticket #27

Michael Weber — Sun, 21 Aug 2016 04:14:41 -0000

Compile error on Mac OS X 10.11.6

jerome created ticket #26

jerome — Thu, 29 Oct 2015 08:48:51 -0000

kerberos not working with several ServerAlias in Vhost

Thomas Braun created ticket #59

Thomas Braun — Fri, 05 Jun 2015 10:28:25 -0000

david noble created ticket #25

david noble — Tue, 31 Mar 2015 22:05:28 -0000

Configure succeeds, but apxs fails big time on CentOS 7

Kerberos Module For Apache released /OldFiles/mod_auth_kerb-5.0-rc4.tar.gz

Kerberos Module For Apache — Wed, 07 Jan 2015 20:31:55 -0000

Kerberos Module For Apache released /OldFiles/mod_auth_kerb-5.0-rc6.tar.gz

Kerberos Module For Apache — Wed, 07 Jan 2015 20:31:55 -0000

Kerberos Module For Apache released /OldFiles/mod_auth_kerb-5.0rc7.tar.gz

Kerberos Module For Apache — Wed, 07 Jan 2015 20:31:55 -0000

Kerberos Module For Apache released /OldFiles/mod_auth_kerb-5.0-rc3.tar.gz

Kerberos Module For Apache — Wed, 07 Jan 2015 20:31:55 -0000

Kerberos Module For Apache released /OldFiles/mod_auth_kerb-5.0-rc5.tar.gz

Kerberos Module For Apache — Wed, 07 Jan 2015 20:31:55 -0000

Kerberos Module For Apache released /OldFiles/mod_auth_kerb-4.12.zip