# Working SPNEGO/GSS Negotiate

**URL:** <https://www.ruby-forum.com/t/working-spnego-gss-negotiate/223281>\
**Category:** NGINX\
**Created:** [September 27, 2012, 8:09pm UTC](https://www.ruby-forum.com/t/working-spnego-gss-negotiate/223281 "2012-09-27T20:09:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![aris](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/258eb7/32.png) [@aris](https://www.ruby-forum.com/u/aris)\
**Post date:** [September 27, 2012, 8:09pm UTC](https://www.ruby-forum.com/t/working-spnego-gss-negotiate/223281/1 "2012-09-27T20:09:47Z")

</div>

Back in February, some patches were posted to the list  
([I patched the spnego module](http://mailman.nginx.org/pipermail/nginx/2012-February/031897.html))  
that made the spnego module for nginx partially work. It did not work  
on non-standard ports and did not fall back to GSS Negotiate properly.  
It also still relied on spnegohelp, an opaquely licensed sample  
implementation from Microsoft.

I’ve made a variety of changes to the module, available at

> **[GitHub - stnoonan/spnego-http-auth-nginx-module: SPNEGO HTTP Authentication...](https://github.com/stnoonan/spnego-http-auth-nginx-module)**
>
> SPNEGO HTTP Authentication Module for nginx. Contribute to stnoonan/spnego-http-auth-nginx-module development by creating an account on GitHub.

At this point, I’ve replaced usage of apache+mod-auth-kerb+unicorn  
with nginx+spnego-http-auth-nginx-module+unicorn and resolved at least  
one of the production issues I was running into. There are still  
quite a few rough spots in this code, so if anyone else would like to  
test and submit bugs, I’d be happy to actually investigate and fix  
them as needed.

–Sean

---

<div class="post-metadata">

**Author:** ![Sean\_Noonan](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/s/779978/32.png) [@Sean\_Noonan](https://www.ruby-forum.com/u/Sean_Noonan)\
**Post date:** [September 27, 2012, 9:33pm UTC](https://www.ruby-forum.com/t/working-spnego-gss-negotiate/223281/2 "2012-09-27T21:33:55Z")

</div>

On Thu, Sep 27, 2012 at 11:09 AM, Sean Noonan  
[removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) \> I’ve made a variety of changes to the  
module, available at

> [GitHub - stnoonan/spnego-http-auth-nginx-module: SPNEGO HTTP Authentication Module for nginx · GitHub](https://github.com/stnoonan/spnego-http-auth-nginx-module)

Sean - thank you for helping improve this, I haven’t had much luck  
getting people to fix the issues/test it/etc. since I originally  
posted it (even though I had initial interest in it)

As such I’ve never actually used the module myself as our intranet is  
so convoluted even getting Apache to work is a hassle. But if I can  
get Apache to work and figure out the right settings, this might  
finally be the work that makes it work properly for nginx! 🙂

Thanks!