github gssapi/mod_auth_gssapi v1.0.0
First Release

latest releases: v1.6.5, v1.6.4, v1.6.3...
9 years ago

This is the first release of mod_auth_gssapi, a new Apache2 authentication module meant to superseed the aging mod_auth_kerb, by using only gssapi APIs, cleaning up code and removing obsolete stuff like krb4 surpport.
In particular mod_auth_gssapi is not limited to the krb5 mechanism but indeed works also with mechanisms like gss-ntlmssp.

Basic features should work witrh any version of GSSAPI, however some features like S4U2 and delegation support are dependent on the credential store extension which is only available in MIT Kerberos starting from version 1.11.

This module also allow the use of session cookies to avoid renegotiating on every request. Session cookies are stored using the mod_sessions module and they are encrypted and MACed. It also allows for tieing the context to a connection without the need for cookies, although this violates a bit the spirit of HTTP, it is how Windows client/servers also implement SPNEGO as documented in RFC 4559.
These behaviors are optional and turned off by default.

Don't miss a new mod_auth_gssapi release

NewReleases is sending notifications on new releases.