extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2024-11-22 07:53:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

added info about firefox with NTLM and update EGroupware configuration

Browse Source
This commit is contained in:
Ralf Becker 2010-09-24 06:11:18 +00:00
parent 6da84c0dcd
commit 2b4eddc56b
2 changed files with 27 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
phpgwapi/ntlm/README
View File

@ -1,5 +1,5 @@
Steps to set up NTLM Single Sign On for eGroupWare 1.6
======================================================
Steps to set up NTLM Single Sign On for eGroupWare 1.6+
=======================================================
(Version: $Id$)
NTLM SSO removes Windows users on a PC, which is a member of a Windows domain
@ -7,9 +7,10 @@ and who are logged into that domain, from the need to explicitly log into eGW.
They simply point IE to the eGW URL (eg. http://domain.com/egroupware/) and
start working. They can of cause explicitly log out and log in as an other user.
As far as I tested, Firefox 3 only allows to enter user (including domain(!), eg. DOMAIN\user)
and password in a popup, which then get's checked from apache via winbind.
It does NOT automatically log you in, if you're logged into the domain on your PC!
Firefox (at least 3.6) requires to manually enable NTLM Auth via about:config:
search for ntlm and set "network.automatic-ntlm-auth.trusted-uris" to the domain
your EGroupware install is using. Otherwise you will only get a popup to enter
username (with prepended windows domain eg. DOMAIN\username) and password.
Here's in short what you need:
-----------------------------

29
phpgwapi/ntlm/egroupware.conf
View File

@ -1,5 +1,8 @@
#
# Apache and PHP configuration for eGroupWare using NTLM authentication
# Apache and PHP configuration for EGroupware using NTLM authentication
#
# This version of EGroupware configuration might not be as up to date as
# the one in /usr/share/doc/rpm-build/apache.conf!
#
# Version: $Id$
#
@ -33,14 +36,20 @@ Alias /egroupware /usr/share/egroupware
php_flag magic_quotes_gpc off
php_flag magic_quotes_runtime off
php_flag register_globals off
php_flag short_open_tag on
php_flag track_vars on
php_value error_reporting E_ALL
php_flag display_errors off
# E_ALL & ~E_NOTICE & ~E_STRICT = 8191 - 8 - 2048 = 6135
php_value error_reporting 6135
php_value max_execution_time 90
php_value mbstring.func_overload 7
php_value memory_limit 48M
php_admin_value mbstring.func_overload 7
php_value memory_limit 64M
php_value session.gc_maxlifetime 14400
php_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/var/lib/php5
php_value upload_max_filesize 16M
php_value include_path .:/usr/share/pear
php_admin_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/share/pear:/usr/bin/zip:/usr/share/jpgraph:/usr/bin/tnef:/usr/bin/aspell
php_value upload_max_filesize 64M
php_admin_value upload_tmp_dir /tmp
php_value post_max_size 65M
<Files ~ "\.inc\.php$">
Order allow,deny
Deny from all
@ -48,11 +57,15 @@ Alias /egroupware /usr/share/egroupware
</Directory>
<Directory /usr/share/egroupware/phpsysinfo/>
php_value open_basedir /
php_admin_value open_basedir /
</Directory>
<Directory /usr/share/egroupware/gallery/>
php_admin_value open_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/share/pear:/usr/bin:/bin
</Directory>
<Location /egroupware/rpc.php>
php_value mbstring.func_overload 0
php_admin_value mbstring.func_overload 0
Order allow,deny
Allow from all
</Location>