# R32276 - in /branches/1.8/phpgwapi/ntlm: README egroupware.conf **URL:** \ **Category:** eGW-svn\ **Created:** [September 24, 2010, 6:11am UTC](https://help.egroupware.org/t/r32276-in-branches-1-8-phpgwapi-ntlm-readme-egroupware-conf/41409 "2010-09-24T06:11:38Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![ralfbecker\_sf](https://help.egroupware.org/letter_avatar_proxy/v4/letter/r/b2d939/32.png) [@ralfbecker\_sf](https://help.egroupware.org/u/ralfbecker_sf)\ **Post date:** [September 24, 2010, 6:11am UTC](https://help.egroupware.org/t/r32276-in-branches-1-8-phpgwapi-ntlm-readme-egroupware-conf/41409/1 "2010-09-24T06:11:38Z")
Author: ralfbecker New Revision: 32276 URL: [http://www.egroupware.org/viewvc/egroupware?rev=32276&view=rev](http://www.egroupware.org/viewvc/egroupware?rev=32276&view=rev) Log: added info about firefox with NTLM and update EGroupware configuration Modified: branches/1.8/phpgwapi/ntlm/README (contents, props changed) branches/1.8/phpgwapi/ntlm/egroupware.conf (contents, props changed) # Modified: branches/1.8/phpgwapi/ntlm/README URL: [http://www.egroupware.org/viewvc/egroupware/branches/1.8/phpgwapi/ntlm/README?rev=32276&r1=32275&r2=32276&view=diff](http://www.egroupware.org/viewvc/egroupware/branches/1.8/phpgwapi/ntlm/README?rev=32276&r1=32275&r2=32276&view=diff) — branches/1.8/phpgwapi/ntlm/README (original) +++ branches/1.8/phpgwapi/ntlm/README Fri Sep 24 08:11:38 2010 @@ -1,5 +1,5 @@ -Steps to set up NTLM Single Sign On for eGroupWare 1.6 -====================================================== +Steps to set up NTLM Single Sign On for eGroupWare 1.6+ +======================================================= (Version: $Id$) NTLM SSO removes Windows users on a PC, which is a member of a Windows domain @@ -7,9 +7,10 @@ They simply point IE to the eGW URL (eg. [http://domain.com/egroupware/](http://domain.com/egroupware/)) and start working. They can of cause explicitly log out and log in as an other user. -As far as I tested, Firefox 3 only allows to enter user (including domain(!), eg. DOMAIN\user) -and password in a popup, which then get’s checked from apache via winbind. -It does NOT automatically log you in, if you’re logged into the domain on your PC! +Firefox (at least 3.6) requires to manually enable NTLM Auth via about:config: +search for ntlm and set “network.automatic-ntlm-auth.trusted-uris” to the domain +your EGroupware install is using. Otherwise you will only get a popup to enter +username (with prepended windows domain eg. DOMAIN\username) and password. ## Here’s in short what you need: ## Propchange: branches/1.8/phpgwapi/ntlm/README ``` svn:keywords = Id ``` # Modified: branches/1.8/phpgwapi/ntlm/egroupware.conf URL: [http://www.egroupware.org/viewvc/egroupware/branches/1.8/phpgwapi/ntlm/egroupware.conf?rev=32276&r1=32275&r2=32276&view=diff](http://www.egroupware.org/viewvc/egroupware/branches/1.8/phpgwapi/ntlm/egroupware.conf?rev=32276&r1=32275&r2=32276&view=diff) — branches/1.8/phpgwapi/ntlm/egroupware.conf (original) +++ branches/1.8/phpgwapi/ntlm/egroupware.conf Fri Sep 24 08:11:38 2010 @@ -1,5 +1,8 @@ # -# Apache and PHP configuration for eGroupWare using NTLM authentication +# Apache and PHP configuration for EGroupware using NTLM authentication +# +# This version of EGroupware configuration might not be as up to date as +# the one in /usr/share/doc/rpm-build/apache.conf! # # Version: $Id$ # @@ -33,14 +36,20 @@ php\_flag magic\_quotes\_gpc off php\_flag magic\_quotes\_runtime off php\_flag register\_globals off - php\_flag short\_open\_tag on php\_flag track\_vars on - php\_value error\_reporting E\_ALL - php\_flag display\_errors off - # E\_ALL & ~E\_NOTICE & ~E\_STRICT = 8191 - 8 - 2048 = 6135 - php\_value error\_reporting 6135 php\_value max\_execution\_time 90 - php\_value mbstring.func\_overload 7 - php\_value memory\_limit 48M - php\_admin\_value mbstring.func\_overload 7 - php\_value memory\_limit 64M php\_value session.gc\_maxlifetime 14400 - php\_value open\_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/var/lib/php5 - php\_value upload\_max\_filesize 16M - php\_value include\_path .:/usr/share/pear - php\_admin\_value open\_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/share/pear:/usr/bin/zip:/usr/share/jpgraph:/usr/bin/tnef:/usr/bin/aspell - php\_value upload\_max\_filesize 64M - php\_admin\_value upload\_tmp\_dir /tmp - php\_value post\_max\_size 65M \ Order allow,deny Deny from all @@ -48,11 +57,15 @@ \ - php\_value open\_basedir / - php\_admin\_value open\_basedir / + - +\ - php\_admin\_value open\_basedir /usr/share/egroupware:/var/lib/egroupware:/tmp:/usr/share/pear:/usr/bin:/bin \ - php\_value mbstring.func\_overload 0 - php\_admin\_value mbstring.func\_overload 0 Order allow,deny Allow from all ## Propchange: branches/1.8/phpgwapi/ntlm/egroupware.conf ``` svn:keywords = Id ``` * * * Nokia and AT&T present the 2010 Calling All Innovators-North America contest Create new apps & games for the Nokia N8 for consumers in U.S. and Canada $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store [http://p.sf.net/sfu/nokia-dev2dev](http://p.sf.net/sfu/nokia-dev2dev) * * * eGroupWare-cvs mailing list [eGroupWare-cvs@lists.sourceforge.net](mailto:eGroupWare-cvs@lists.sourceforge.net) [https://lists.sourceforge.net/lists/listinfo/egroupware-cvs](https://lists.sourceforge.net/lists/listinfo/egroupware-cvs)