Comments on: Single Sign-On with Apache and Active Directory - Part 1

By: Stan

Stan — Fri, 18 Apr 2008 15:55:50 +0000

I have the same issue as zerocool and IE keeps popping up login dialog

logs show Bad/Missing NTLM/Basic Authorization Header for /test/viewlist.php

By: zerocool

zerocool — Mon, 17 Mar 2008 08:49:53 +0000

I have a problem setting this up, i get ==> You have logged in as ;

this is my ntlm.conf file
—————————–

PerlAuthenHandler Apache2::AuthenNTLM
AuthType ntlm,basic
AuthName Basic
require valid-user
# domain pdc bdc
PerlAddVar ntdomain “EXAMPLE server.EXAMPLE.COM″
PerlSetVar defaultdomain server
PerlSetVar splitdomainprefix 1

(offtopic:I already tried working with mod_auth_kerb and mod_auth_ldap but i allways get the login prompt that keeps popping up, and if check the apache logs, it says cant find KDC?)

By: Adam Nielson

Adam Nielson — Wed, 13 Feb 2008 18:09:57 +0000

Cool! Thank you very much! Its working now and the index.php file is reporting back properly!

Now… any ideas how to get OTRS to work with it? :)

By: Matt

Matt — Wed, 13 Feb 2008 14:30:13 +0000

@Adam: The file should be index.php. The instructions above need to be fixed. And just to make sure that it is written correctly above the code should be:

" . $_SERVER['REMOTE_USER'] . "";
?>

I’ll fix the instructions above very soon.

As for the error you will sometime get that even though this is working.

By: Adam Nielson

Adam Nielson — Wed, 13 Feb 2008 02:01:58 +0000

Ok, I followed the directions, and I get:

[error] Bad/Missing NTLM/Basic Authorization Header for /

I am trying to access the index.html file I created as you suggested. It just loads up and says:

” . $_SERVER[’REMOTE_USER’] . “”; ?>

I am trying to get this to work with OTRS.

By: cs

cs — Thu, 05 Jul 2007 15:13:34 +0000

Problem solved ! :)

I had a long domain name with dots in this variable :
PerlAddVar ntdomain “DOMAIN.FOO.BAR PDC BDC”

I replaced “DOMAIN.FOO.BAR” by the short domain name “DOMAIN” and now it works.

By: cs

cs — Thu, 05 Jul 2007 15:07:17 +0000

Looks cool, but :
[24809] AuthenNTLM: Authorization Header
[Thu Jul 05 17:02:14 2007] [error] Bad/Missing NTLM/Basic Authorization Header for /
…

I saw this message many times on google, but no answer. On my client, IE and also firefox are configured to do a NTLM negociation with my server.