[horde] Horde 3.1.3 and Kerberos auth

[Vilius Šumskas]

Try this one:

http://www.horde.org/download/php/phpkrb5.tar.gz

-- 
  Pagarbiai,

  Vilius Šumskas
  LNK TV sistemų administratorius
  mob.: +370 614 75713
  http://www.lnk.lt


> -----Original Message-----
> From: horde-bounces at lists.horde.org [mailto:horde-
> bounces at lists.horde.org] On Behalf Of Torsten Becker
> Sent: 2007 m. lapkričio 13 d. 10:14
> To: horde at lists.horde.org
> Subject: Re: [horde] Horde 3.1.3 and Kerberos auth
> 
> Hi,
> 
> I changed the line in php.ini file to:
> 
> extension=libphpkrb5.so
> 
> After a restart of Apache the Webinterface of Horde does not show a
> error message.
> But I am prompted to give username and password. Login with
> username/password is ok.
> 
> Putting the Browser to krb5.php to test if it can get the rignt
> username/password from cerberos gives me an OK.
> 
> I have strace'd another tool (/usr/bin/krb5test) and can see that this
> tool can connect to my cerberos server.
> But this tools gives me no feedback. There should be a 0 for OK and
> some other belonging to the error.
> 
> The Logfile stays to show this messages:
> 
> Nov 13 08:56:01 HORDE [emergency] [] Auth_krb5: Required krb5 extension
> not found. [on line 52 of "/usr/share/horde3/lib/Horde/Auth/krb5.php"]
> Nov 13 08:57:01 HORDE [emergency] [] Auth_krb5: Required krb5 extension
> not found. [on line 52 of "/usr/share/horde3/lib/Horde/Auth/krb5.php"]
> Nov 13 08:58:01 HORDE [emergency] [] Auth_krb5: Required krb5 extension
> not found. [on line 52 of "/usr/share/horde3/lib/Horde/Auth/krb5.php"]
> Nov 13 08:59:01 HORDE [emergency] [] Auth_krb5: Required krb5 extension
> not found. [on line 52 of "/usr/share/horde3/lib/Horde/Auth/krb5.php"]
> Nov 13 09:00:01 HORDE [emergency] [] Auth_krb5: Required krb5 extension
> not found. [on line 52 of "/usr/share/horde3/lib/Horde/Auth/krb5.php"]
> 
> This messages appears once every minute.
> 
> 
> 
> 
> 
> Michael Herde schrieb:
> > Hi there,
> >
> > have you tried ldd to check out the dependencies of the php4 module ?
> Is the
> > cerberos library mentioned there ? Is the php4 module the apache uses
> > the same that you compiled ? These are questions i would ask to fix
> > the problem.
> >
> horde:~# ldd /usr/lib/php4/20050606+lfs/libphpkrb5.so
>         linux-gate.so.1 =>  (0xb7f8a000)
>         libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0xb7f04000)
>         libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0xb7edf000)
>         libcom_err.so.2 => /lib/libcom_err.so.2 (0xb7edc000)
>         libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb7da8000)
>         libresolv.so.2 => /lib/tls/i686/cmov/libresolv.so.2
> (0xb7d94000)
>         libkrb5support.so.0 => /usr/lib/libkrb5support.so.0
> (0xb7d8f000)
>         /lib/ld-linux.so.2 (0x80000000)
> 
> phpinfo() gives this output for krb5:
> 
> krb5 support 	enabled
> 
> 
> Validate kerberos5 login. Usage krb5_login(user, password). Returns
> KRB5_OK if user and password match. Returns KRB5_BAD_PASSWORD if wrong
> password. Returns KRB5_BAD_USER if user invalid. Returns KRB5_NOTOK on
> error.
> 
> 
> 
> > Quoting Torsten Becker <t.becker at nc-world.de>:
> >
> >
> >> Is anyone using kerberos authentication with horde3? Perhaps with
> the
> >> newer php5? Are there any hints for me?
> >>
> >
> > some years ago i compiled that cerberos module for php4. i had to
> > realize that that module was only misleadingly called a cerberos
> > module. It only tried to authenticate letting the cerberos server
> > check the login/password credentials and recieving true or false. But
> > unfortunatly it was not able to store the tickets afterwards. So it
> > would be only suitable for authentication and than you would have to
> > store the login/password credentials in the session as usual. Horde
> > would not be able to store the ticket instead in the session by using
> > that php module.
> >
> > Maybe i'm wrong - maybe the module was enhanced in the meantime. I
> > noticed the development stopped 2001 appr.
> >
> > We would have great demand for such a module here too. Our
> > authentication systems based upon cerberos.
> >
> >
> Is it possible for you to authenticate against cerberos without beeing
> asked for username/password in every module (mostly needed
> imp,ingo,turba,kronolith)?
> I 'm searching for a groupware system that can handle this and thought
> horde would do the job. But I'm not fixed to Horde...
> 
> mfg
> Torsten Becker
> 
> 
> --
> Horde mailing list - Join the hunt: http://horde.org/bounties/#horde
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: horde-unsubscribe at lists.horde.org