Question

Greetings,

I want to configure twiki on our intranet using windows Authenthication. I installed mod_perl-1.29 and AuthenNTLM-2.10, Authentications works I get the login dialog enter usename and pw and it logs me in and sets REMOTE_USER. The problems is that I get can not get rid of the login dialog.

Domain: Active Directory

Apache error_log
[Wed Apr  6 22:16:00 2005] [notice] Apache/1.3.9 (Unix) mod_perl/1.29 configured -- resuming normal operations
[13191] AuthenNTLM: Config Domain = MY_DOMAIN  pdc = PDC_SERVER  bdc = BDC_SERVER
[13191] AuthenNTLM: Config Default Domain = MY_DOMAIN
[13191] AuthenNTLM: Config Fallback Domain = 
[13191] AuthenNTLM: Config AuthType = ntlm AuthName = twiki
[13191] AuthenNTLM: Config Auth NTLM = 1 Auth Basic = 0
[13191] AuthenNTLM: Config NTLMAuthoritative = on  BasicAuthoritative = on
[13191] AuthenNTLM: Config Semaphore key = 23754 timeout = 2
[13191] AuthenNTLM: Config SplitDomainPrefix = 
[13191] AuthenNTLM: Authorization Header <not given>
[Wed Apr  6 22:16:14 2005] [error] access to /twiki/bin/view/Main/WebHome failed for  , reason: Bad/Missing NTLM/Basic Authorization Header for /twiki/bin/view/Main/WebHome

httpd.conf
<Directory /home/httpd/twiki>
  PerlAuthenHandler Apache::AuthenNTLM
  AuthType ntlm
  AuthName twiki
  require valid-user
  PerlAddVar ntdomain "DOMAIN  PDC   BDC"
  PerlSetVar defaultdomain DOMAIN
  PerlSetVar ntlmsemtimeout 2
  PerlSetVar ntlmdebug 1
</Directory>

Any suggestions?

Environment

-- JoseHernandez - 07 Apr 2005

Answer

take a look through WindowsInstallModNTLM

-- MattWilkie - 08 Apr 2005

At first I tried mod_ntlm but I could not get it to compile therefore I went with AuthenNTLM. It compiled ok and it works, I always get the login dialog, but I can not get the windows authentication to work. I have read many pages on NTLM but I can not figure out what is wrong with my set up. I'll probably try the Windows version if I can not get this to work.

-- JoseHernandez - 11 Apr 2005

What did the compile-error sound like? Perhaps apxs isn't installed...

-- SteenManniche - 18 Apr 2005

First, get rid of mod_perl. Strange things happen and it tends to mess with stuff. Add it back later if you want, but try PersistentPerl first.

Second, try another browser to see if you get a different behavior. Oftentimes I see more error diagnostics via FireFox as IE likes to shield the user from those harmful error messages .

Third, the errors and you config don't appear to agree. It seems that you have told the module that you are part of domainname "DOMAIN" and your pdcname is "PDC" and your bdcname is "BDC", yet the errors indicate something different. What is the name of the domain, plus the netbios names for the PDC and BDC?

The default domain needs to be set. NTLM normally requires that the user provide the domain AND the loginid when authenticating: mydomain/myid. It looks like you can cause the domain to be set for you.

-- SteveRJones - 07 Jun 2005

Have you tried using ieHTTPHeaders, from www.blunck.info/iehttpheaders.html, to review what's passing between your web client and the server?

-- MikeEmmott - 08 Aug 2005

Have you set the settings KeepAlive from Off to On? httpd.conf

   ...
   KeepAlive On
   ...

-- HieuLeTrung - 31 May 2007