Apache Friends Support Forum

In Apache 2.2.x (old version of apache) mod_auth_sspi works fine for restricting application access to a particular windows group users, as mentioned below:

<IfModule mod_auth_sspi.c>
<LocationMatch "(.*)/<Application_Location>/(.*)">
AuthName "Application_Name"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
require group <Server_Name>\<Windows_Group_Name>
</LocationMatch>
</IfModule>

How this can be achieved in Apache 2.4.29 as there is on mod_auth_sspi available and supported in this version?

I have easily done this thing in IIS webserver as i could not find any support in Apache.

The home of mod_auth_sspi says its valid for Apache 2.x: https://sourceforge.net/projects/mod-auth-sspi/

In fact, there is no development since many years, but did you check that version?

A little further digging one would find mod_authnz_sspi and also mod_authn_ntml, both are for Apache 2.4. Even people that have gotten it to work have shared how they did it.

Nobbie wrote:In fact, there is no development since many years, but did you check that version?

Yes it's old. Even mod_authnz_sspi (same project, different branch) now is over 5 years old. mod_authn_ntlm is current. Both come from same mod_auth_sspi.

just FYI: 2.2 and 2.4 APIs are different and it won't load. Differences in the authentication/authorization functions as well.