Re: No login prompt on Apache

If you are on IBM i 7.2 and later releases, you may try this:

<Directory />
Require ip 1.2.3.9
Require not ip 1.2.3.10
Require valid-user
PasswdFile %%SYSTEM%%
UserID %%CLIENT%%
AuthType KerberosOrBasic
AuthName domain_name_here
ProfileToken On
Options +IncludesNoExec
SetOutputFilter Includes
</Directory>

2017-12-19 10:33 GMT+08:00 Justin Taylor <JUSTIN@xxxxxxxxxxxxx>:

I have an existing Apache server that should allow Kerberos or basic
authentication. It should try Kerberos first and then try basic
authentication if Kerberos fails. Kerberos still works for domain members,
but non-domain members aren't getting the login prompt. For non-domain
members, it immediately gives an authentication failed message. It's been
months since I tried connecting a non-domain member, but it worked at one
time.

Any suggestions on what to try?


Here's a snippet of the config:
<Directory />
Order allow,deny
Allow From 1.2.3.9
Deny From 1.2.3.10
Require valid-user
PasswdFile %%SYSTEM%%
UserID %%CLIENT%%
AuthType KerberosOrBasic
AuthName domain_name_here
ProfileToken On
Options +IncludesNoExec
SetOutputFilter Includes
</Directory>
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.