Hello,
i’ve made a hack for egroupware that should be interesting for pure-windows
environment (server and clients) egroupware users.
Works for Apache 2.0.55
1 - Download “mod_auth_sspi-1.0.3-2.0.55.zip” on
http://www.gknw.at/development/apache/httpd-2.0/win32/modules/
2 - Copy mod_auth_sspi.so into your apache\modules directory
3 - Add to your httpd.conf module section :
LoadModule sspi_auth_module modules/mod_auth_sspi.so
4 - Add to your httpd.conf egroupware directory section :
AuthType SSPI
AuthName "Something"
SSPIAuth On
SSPIAuthoritative On
Require valid-user
5 - in egroupware, change your auhentication method to “http”
6 - in “login.php” (egroupware root directory), add the following lines near
line 134, just after the comment /* Program starts here */ :
if (isset($_SERVER[‘REMOTE_USER’]))
{
$temp = explode("\",getenv(“REMOTE_USER”));
$_SERVER[‘PHP_AUTH_USER’] = mb_strtoupper($temp[1]);
}
( with sspi authentication, the credentials are stored in the apache
environment variable “REMOTE_USER”, but egroupware, in http authentication,
consider that it is in “PHP_AUTH_USER”. So, if we don’t want to change all
the code below, just say PHP_AUTH_USER = REMOTE_USER
REMOTE_USER looks like “DOMAIN\USER”, wo, first line is just for removing
the backslash, and keep only the user)
7 - Restart Apache 
8 - Now you are automatically authenticated with the Domain/User/password
you used to open your windows session, without the login/pass prompt.
Now, two questions :
-
Maybe it could be interesting to add an another authentication way choice,
and adapt the login.php code.
(Something like “if($GLOBALS[‘egw_info’][‘server’][‘auth_type’] == ‘sspi’ &&
isset($_SERVER[‘REMOTE_USER’]))”)
-
with this configuration, i try that users stored in the sql user database
(IT/Admins/OSS users in my company) be connected to egroupware default page,
and users not stored in the sql user database (default users in my copany)
come to SiteMgr.
I can’t find any way. Anyone help ?
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
eGroupWare-developers mailing list
eGroupWare-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-developers
