Hello, I want to limit access to a server via nginx. Therefore I want to have 2 AD groups: one with user allowed to read (use GET) and one with people to write (POST and PUT ) What I already found is the limit_except directive, but I see only a way to enable basic authentication. Is this possible with a kerberos authentication user? (authentication in general is already working) What I thiby ptulpen - How to...
Hello, I use an nginx server with kerberos in front of another webserver as authentication proxy. But when I do so, the page loads very slow and sometimes is even incomplete (probably due to timeouts) When I disable gss in the nginx config, everything runs smooth. So my idea is to cache the authentication For apache I found socache: https://httpd.apache.org/docs/trunk/howto/auth.html#socacheby ptulpen - How to...
I want to have a webservice which authenticates the user via Kerberos (already know how to do that) and then redirect to 2 different services based on a group membership. The group can either be an active directory or local group in a config file or something. I found several instructions to forward to the userfolder, but nothing like "forward users from group a to port 1234 an users from gby ptulpen - How to...