[mod_python] Mod_python and kerberos authentication (mod_auth_kerb)

Graham Dumpleton graham.dumpleton at gmail.com
Wed Jan 16 01:03:56 EST 2008


I remember now.

See:

  http://issues.apache.org/jira/browse/MODPYTHON-47

Use same workaround as described in their for using Digest auth with publisher.

Graham

On 16/01/2008, Cassiano, Marco <mcassiano at manord.com> wrote:
> Graham,
>
> here is the information from mod_python.testhandler.
> The kerberos authentication worked fine with testhandler.
> I can't see anything strange in the output....
> Thank
>
> marco
>
>
> -----------------------------------------------------------------------------
>
>
>
> General information
> Apache version  Apache
> Apache threaded MPM     No (single thread MPM)
> Apache forked MPM       Yes, maximum 256 processes
> Apache server root      /etc/httpd/
> Apache document root    /var/www/html/site
> Apache error log        /var/log/www/error.log (view last 100 lines)
> Python sys.version      2.4.2 (#1, Jan 30 2006, 15:30:03) [GCC 3.2.3 20030502 (Red Hat Linux 3.2.3-53)]
> Python sys.path
>
> /var/www/cgi/testkerb/
> /usr/local/lib/python2.4/site-packages/setuptools-0.6c5-py2.4.egg
> /usr/local/lib/python24.zip
> /usr/local/lib/python2.4
> /usr/local/lib/python2.4/plat-linux2
> /usr/local/lib/python2.4/lib-tk
> /usr/local/lib/python2.4/lib-dynload
> /usr/local/lib/python2.4/site-packages
> /usr/local/lib/python2.4/site-packages/PIL
> /usr/local/lib/python2.4/site-packages/barcode
> /usr/local/lib/python2.4/site-packages/MySQLdb
> /usr/local/lib/python2.4/site-packages/_xmlplus
> /usr/local/lib/python2.4/site-packages/reportlab
>
> Python interpreter name apache.foo.com
> mod_python.publisher available  Yes
> mod_python.psp available        Yes
> Request input headers
> Key     Value
> Host    apache.foo.com
> User-Agent      Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
> Accept  text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
> Accept-Language en-us,en;q=0.5
> Accept-Encoding gzip,deflate
> Accept-Charset  ISO-8859-1,utf-8;q=0.7,*;q=0.7
> Keep-Alive      300
> Connection      keep-alive
> Authorization   Negotiate Y....4
> Request environment
> Key     Value
> SCRIPT_URL      /test/domain_login1.py/check_user
> SCRIPT_URI      http://apache.foo.com/test/domain_login1.py/check_user
> GATEWAY_INTERFACE       CGI/1.1
> SERVER_PROTOCOL HTTP/1.1
> REQUEST_METHOD  GET
> QUERY_STRING
> REQUEST_URI     /test/domain_login1.py/check_user
> SCRIPT_NAME     /test/domain_login1.py
> PATH_INFO       /check_user
> PATH_TRANSLATED /var/www/check_user
> HTTP_HOST       apache.foo.com
> HTTP_USER_AGENT Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
> HTTP_ACCEPT     text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
> HTTP_ACCEPT_LANGUAGE    en-us,en;q=0.5
> HTTP_ACCEPT_ENCODING    gzip,deflate
> HTTP_ACCEPT_CHARSET     ISO-8859-1,utf-8;q=0.7,*;q=0.7
> HTTP_KEEP_ALIVE 300
> HTTP_CONNECTION keep-alive
> PATH    /usr/local/bin:/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin
> SERVER_SIGNATURE
> SERVER_SOFTWARE Apache
> SERVER_NAME     apache.foo.com
> SERVER_ADDR     192.168.1.150
> SERVER_PORT     80
> REMOTE_ADDR     192.168.1.1
> DOCUMENT_ROOT   /var/www/html/site
> SERVER_ADMIN    admin at foo.com
> SCRIPT_FILENAME /var/www/cgi/testkerb/domain_login1.py
> REMOTE_PORT     1681
> REMOTE_USER     admin@@FOO.COM
> AUTH_TYPE       Negotiate
> Request configuration
> Key     Value
> PythonAutoReload        1
> PythonDebug     1
> Request options
> Key     Value
> ApplicationPath /
> SessionDbm      /var/www/html/sid/session.dbm
> session_directory       /var/www/html/sid/session
> Request notes
> Key     Value
> python_init_ran 1
> mod_rewrite_rewritten   0
> Server configuration
> Key     Value
> PythonAutoReload        1
> PythonDebug     1
> PythonPath      sys.path+['/var/www/cgi/common','/var/www/cgi/devel']
> Server options
> Key     Value
> Server configuration tree
>
> ServerTokens Prod
> PidFile run/httpd.pid
> Timeout 120
> KeepAlive On
> MaxKeepAliveRequests 3
> KeepAliveTimeout 15
> StartServers 8
> MinSpareServers 5
> MaxSpareServers 20
> ServerLimit 256
> MaxClients 256
> MaxRequestsPerChild 50
> Listen 0.0.0.0:80
>
>
>         SetHandler default-handler
> Alias /test/ "/var/www/cgi/testkerb/"
>
>     AuthType Kerberos
>     KrbAuthRealm FOO.COM
>     KrbServiceName HTTP/apache.foo.com at FOO.COM
>     Krb5Keytab /etc/httpd//conf/sviluppotab
>     KrbMethodNegotiate on
>     KrbMethodK5Passwd off
>     Require valid-user
>     Order Deny,Allow
>     Deny from all
>     Allow from 192.168.1
>     Allow from 127.0.0.1
>     SetHandler mod_python
>     PythonHandler mod_python.testhandler | .py
>     PythonAutoReload on
>     PythonDebug on
>     PythonOption ApplicationPath '/'
>     PythonOption SessionDbm '/var/www/html/authdata/sid/session.dbm'