kerberos apache php partialy working

时间:2017-02-18 10:04:10

标签: php apache kerberos

在apache php上遇到kerberos身份验证问题 设置= RHEL 7 来自rhscl的apache 2.4 来自rhscl的php7配置了php-fpm

Kerberos在http://site.domain/上完美运行 但不是http://site.domain/index.php

访问.php文件时,所有子目录都会出现同样的问题。

在vhost设置中有一个重写php到fcgi。

index.php => $ _SERVER [' REMOTE_USER']

vhost setup

<VirtualHost *:443 > 
  ## Vhost docroot
 DocumentRoot /opt/code70

 <Directory /opt/code70>
    Options Indexes MultiViews
    Options FollowSymLinks
    IndexOptions FancyIndexing HTMLTable VersionSort IgnoreCase
    IndexOrderDefault Descending Date
    IndexIgnore *.php

    AuthType Kerberos
AuthName "Kerberos"
KrbMethodNegotiate On
KrbMethodK5Passwd On
KrbAuthRealms ....
....    
KrbVerifyKDC Off
KrbSaveCredentials Off
KrbLocalUserMapping On
KrbAuthoritative On
    Order allow,deny
    Allow from all
    Require valid-user
</Directory>

## SSL directives
SSLEngine on
SSLCertificateFile      ......
SSLProtocol             -ALL +TLSv1
SSLCipherSuite           ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
SSLHonorCipherOrder     On
ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://localhost:9000/opt/code70/$1   
</VirtualHost>

0 个答案:

没有答案