SSO with Apache and Kerberos

Question

I have a instance of Confluence 4.2.11 with NTLM Authentication.

I'm searching for a way to set up an Apache Server with Likewise/Kerberos authentication in front of confluence.
Userauthentication should be done with apache and be passed to confluence.

Has anyone an idea how to do this?
Are there any connectors for example AJP for confluence that can do authentication?

Regards,

Rene

Bruno Vincent · Answer

Alternatively you might want to take a look at the IWAAC plugin: https://marketplace.atlassian.com/plugins/com.cleito.iwaac/server/overview

The Kerberos authentication would take place on your Confluence server in that case.

IWAAC officially supports Confluence, Jira, Bamboo, Bitbucket Server, FishEye, Crucible and any other web app using Crowd a its user management system.

You can download IWAAC and test it for free at: https://www.cleito.com/products/iwaac/

Ellen Feaheny [ · Answer

Hi Rene -

AppFusions has installed this solution with Apache in front in the network a number of times.

Single Sign-On (SSO) Authenticator for Windows/Active Directory (via Kerberos)

In fact this is one of our pre-config questions -

"Do you use a reverse proxy or another web server, e.g., Apache or IIS, in front of your Atlassian product?" among other..

Then we walk you through it, step by step, based on your specific network environment, parameters, addressing, sometimes special needs - etc. on your staging. You then repeat the process on your production environment.

Usually this is completed with a bit of back and forth comm./configs inside of a week, start to finish (not constant time - back and forth comm, test, configs, done). Its a pretty streamlined process.

In case you just want to get it done.

Best,

Ellen

info@appfusions.com