# Kerberos

**URL:** <https://www.ruby-forum.com/t/kerberos/228346>\
**Category:** NGINX\
**Created:** [April 18, 2013, 9:03pm UTC](https://www.ruby-forum.com/t/kerberos/228346 "2013-04-18T21:03:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Friedrich\_L](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/f/67e7ee/32.png) [@Friedrich\_L](https://www.ruby-forum.com/u/Friedrich_L)\
**Post date:** [April 18, 2013, 9:03pm UTC](https://www.ruby-forum.com/t/kerberos/228346/1 "2013-04-18T21:03:01Z")

</div>

I wonder if nginx supports kerberos in the same sense as apache does!  
I mean: with apache i may specify if i will want SSO or password (by  
retrieving the password from the kerberos database).

The configuration options are:

```
    KrbMethodNegotiate off/on
    KrbMethodK5Passwd off/on

```

These above are the directives for SSO or password (fetched from kdc  
database).

Does nginx support the same way too ?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![Friedrich\_L](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/f/67e7ee/32.png) [@Friedrich\_L](https://www.ruby-forum.com/u/Friedrich_L)\
**Post date:** [June 7, 2013, 9:18am UTC](https://www.ruby-forum.com/t/kerberos/228346/2 "2013-06-07T09:18:44Z")

</div>

This is a long time coming - I wanted to reply, I funded a project to  
try  
to get GSSAPI/SPNEGO support into nginx.

The developer didn’t know Kerberos nor nginx - but tried his best to get  
it  
to work.

I could never get it to work, but my company’s AD/Kerberos setup is  
confusing even for an Apache setup (especially since I do not have admin  
access to the domain and such)

Anyway, that code is up here, no idea if it works with newer versions of  
nginx.

> **[GitHub - mike503/spnego-http-auth-nginx-module: SPNEGO HTTP Authentication...](https://github.com/mike503/spnego-http-auth-nginx-module)**
>
> SPNEGO HTTP Authentication Module for nginx. Contribute to mike503/spnego-http-auth-nginx-module development by creating an account on GitHub.

and a bunch of forks, but nobody is very vocal about this functionality  
with nginx sadly.

> **[Network Graph · mike503/spnego-http-auth-nginx-module](https://github.com/mike503/spnego-http-auth-nginx-module/network)**
>
> SPNEGO HTTP Authentication Module for nginx. Contribute to mike503/spnego-http-auth-nginx-module development by creating an account on GitHub.

One of the more active forks is here:

> **[GitHub - stnoonan/spnego-http-auth-nginx-module: SPNEGO HTTP Authentication...](https://github.com/stnoonan/spnego-http-auth-nginx-module)**
>
> SPNEGO HTTP Authentication Module for nginx. Contribute to stnoonan/spnego-http-auth-nginx-module development by creating an account on GitHub.

I’d love to see this get further developed/tested/etc. - if anyone has  
done  
this successfully, what their configs look like, OS, keytabs, whatever  
else… because I’d like to _use_ it 🙂

On Thu, Apr 18, 2013 at 12:02 PM, Friedrich L.  
\<removed\_email\_address@domain.invalid