<ahref="https://en.wikipedia.org/wiki/Kerberos_(protocol)"class="urlextern"title="https://en.wikipedia.org/wiki/Kerberos_(protocol)"rel="nofollow">Kerberos</a> is a network authentication protocol used to authenticate users based on their desktop session.
In Manager, go in <code>General Parameters</code>><code>Authentication modules</code> and choose Kerberos for authentication. Then go to “Kerberos parameters” and configure the following parameters:
</p>
<ul>
<liclass="level1"><divclass="li"><strong>keytab file</strong> (required): the Kerberos keytab file</div>
<liclass="level1"><divclass="li"><strong>Use Ajax request</strong>: set to “enabled” if you want to use an Ajax request instead of a direct Kerberos attempt. <strong>This is required if you want to chain Kerberos in a <ahref="authcombination.html"class="wikilink1"title="documentation:2.0:authcombination">combination</a></strong></div>
<liclass="level1"><divclass="li"><strong>Use Web Server Kerberos module</strong>: set to “enabled” to use the Web Server module (for example Apache mod_auth_kerb) instead of Perl Kerberos code to validate Kerberos ticket</div>
</li>
<liclass="level1"><divclass="li"><strong>Remove domain in username</strong>: set to “enabled” to strip username value and remove the '@domain'.</div>
La configuration Kerberos est assez complexe. On peut trouver quelques éléments de configuration <ahref="kerberos.html"class="wikilink1"title="documentation:2.0:kerberos">dans cette page</a>.
<h3class="sectionedit6"id="web_server_kerberos_module">Web Server Kerberos module</h3>
<divclass="level3">
<p>
If you want to let Web Server Kerberos module validates the Kerberos ticket, set the according option to “enabled” and configure the portal virtual host to launch the module if “kerberos” GET parameter is in the request.