added info about firefox with NTLM and update EGroupware configuration

This commit is contained in:
Ralf Becker 2010-09-24 06:11:18 +00:00
parent 6da84c0dcd
commit 2b4eddc56b
2 changed files with 27 additions and 13 deletions

View File

@ -1,5 +1,5 @@
Steps to set up NTLM Single Sign On for eGroupWare 1.6 Steps to set up NTLM Single Sign On for eGroupWare 1.6+
====================================================== =======================================================
(Version: $Id$) (Version: $Id$)
NTLM SSO removes Windows users on a PC, which is a member of a Windows domain NTLM SSO removes Windows users on a PC, which is a member of a Windows domain
@ -7,9 +7,10 @@ and who are logged into that domain, from the need to explicitly log into eGW.
They simply point IE to the eGW URL (eg. http://domain.com/egroupware/) and They simply point IE to the eGW URL (eg. http://domain.com/egroupware/) and
start working. They can of cause explicitly log out and log in as an other user. start working. They can of cause explicitly log out and log in as an other user.
As far as I tested, Firefox 3 only allows to enter user (including domain(!), eg. DOMAIN\user) Firefox (at least 3.6) requires to manually enable NTLM Auth via about:config:
and password in a popup, which then get's checked from apache via winbind. search for ntlm and set "network.automatic-ntlm-auth.trusted-uris" to the domain
It does NOT automatically log you in, if you're logged into the domain on your PC! your EGroupware install is using. Otherwise you will only get a popup to enter
username (with prepended windows domain eg. DOMAIN\username) and password.
Here's in short what you need: Here's in short what you need:
----------------------------- -----------------------------

View File

@ -1,5 +1,8 @@
# #
# Apache and PHP configuration for eGroupWare using NTLM authentication # Apache and PHP configuration for EGroupware using NTLM authentication
#
# This version of EGroupware configuration might not be as up to date as
# the one in /usr/share/doc/rpm-build/apache.conf!
# #
# Version: $Id$ # Version: $Id$
# #
@ -33,14 +36,20 @@ Alias /egroupware /usr/share/egroupware
php_flag magic_quotes_gpc off php_flag magic_quotes_gpc off
php_flag magic_quotes_runtime off php_flag magic_quotes_runtime off
php_flag register_globals off php_flag register_globals off
php_flag short_open_tag on
php_flag track_vars on php_flag track_vars on
php_value error_reporting E_ALL php_flag display_errors off
# E_ALL & ~E_NOTICE & ~E_STRICT = 8191 - 8 - 2048 = 6135
php_value error_reporting 6135
php_value max_execution_time 90 php_value max_execution_time 90
php_value mbstring.func_overload 7 php_admin_value mbstring.func_overload 7
php_value memory_limit 48M php_value memory_limit 64M
php_value session.gc_maxlifetime 14400 php_value session.gc_maxlifetime 14400
php_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/var/lib/php5 php_value include_path .:/usr/share/pear
php_value upload_max_filesize 16M php_admin_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/share/pear:/usr/bin/zip:/usr/share/jpgraph:/usr/bin/tnef:/usr/bin/aspell
php_value upload_max_filesize 64M
php_admin_value upload_tmp_dir /tmp
php_value post_max_size 65M
<Files ~ "\.inc\.php$"> <Files ~ "\.inc\.php$">
Order allow,deny Order allow,deny
Deny from all Deny from all
@ -48,11 +57,15 @@ Alias /egroupware /usr/share/egroupware
</Directory> </Directory>
<Directory /usr/share/egroupware/phpsysinfo/> <Directory /usr/share/egroupware/phpsysinfo/>
php_value open_basedir / php_admin_value open_basedir /
</Directory>
<Directory /usr/share/egroupware/gallery/>
php_admin_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/share/pear:/usr/bin:/bin
</Directory> </Directory>
<Location /egroupware/rpc.php> <Location /egroupware/rpc.php>
php_value mbstring.func_overload 0 php_admin_value mbstring.func_overload 0
Order allow,deny Order allow,deny
Allow from all Allow from all
</Location> </Location>