I am trying to implement windows authentication using mod_sspi_auth module.
I am able to implement basic implementation of this module after configuring httpd.conf of apache 2.2.
The configuration I have applied is,
<Location /static >
AuthName "Windows Authentication Test"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative Off
SSPIDomain test.domain.com
SSPIOfferBasic On
SSPIOmitDomain Off
SSPIUsernameCase lower
Require valid-user
</Location>
And its working correctly with one issue. When I am trying access my website from the machine which is not present in my domain, that machine is getting authenticated with my application server machine. Which is not expected.
Now I want to authenticate group of users, which i created in windows server 2008 AD. I have added some users in this group, and using Require group directive of apache I have tried to use "Require Group" directive with multiple combination.
But still i am stuck to the problem of not authenticating the group users.
The configuration in httpd.conf for group combination is
<Location /static >
AuthName "Windows Authentication Test"
AuthType SSPI
SSPIAuth On
SSPIAuthoritative Off
SSPIDomain test.domain.com
SSPIOfferBasic On
SSPIOmitDomain Off
SSPIUsernameCase lower
Require group test.domain.com\mygroup
</Location>
Others combination that I have already tried with Require directive are as follow.
Require group "test.domain.com\mygroup"
Require group mygroup
Require group "mygroup"
Require Group "CN=abc,DC=test.domain.com"
Require Group CN=abc,DC=test.domain.com
Can any one help me on this..?????