[SOLVED] libnginx-mod-http-auth-spnego on Debian 12 Bookworm

[zikos]

Hello,

I just installed a fresh Debian 12.

I wanted to set up Kerberos authentication (based on Active Directory).

I followed the tutorial at:
https://www.it-connect.fr/installer-wap ... logiciels/

The libnginx-mod-http-auth-spnego package doesn't seem to be available for Debian 12?

I did find some versions here:
https://wapt.tranquil.it/debian/wapt-2. ... n/n/nginx/

But they only go up to Debian 11.

I can't find any information about this in the WAPT 2.5 installation guide.

Could someone tell me if there's another way to set up Kerberos authentication?

Thank you very much,

Gregory.

[sfonteneau]

Hello

, libnginx-mod-http-auth-spnego is indeed in the Debian 12 repository; use this one:

https://wapt.tranquil.it/debian/wapt-2. ... th-spnego/

[zikos]

Hello,
thank you for the reply.
I had just seen that you had asked the same question at the beginning of April.
Gregory.

[zikos]

Note that I've made good progress with my installation.

For now (but I'll look into it on Monday), I can't explain why my WAPT server hasn't appeared in my "Provisioning" OU.

I didn't encounter any errors in my: `kinit wapt`, `klist`, and then the `msktutil` command (where I specifically added my `srv-wapt` machine to the Provisioning OU).

Thanks for the help anyway.

[zikos]

Hello,

WAPT2.5 / Debian 12 Bookworm

@sfonteneau

I finished the installation and strangely, as I had already seen on Friday, I do not have any updates from my srv-wapt machine in the "prosioning" folder that I created. I even tested with another account (I correctly granted the rights to the "wapt" account on both folders (delegating control to the wapt account with only "computer" type objects and with "create/deletion" permissions set to "create" all child objects).

When I enter my wapt kinit (+password): no error.
Then the Klist correctly gives me the Kerberos ticket for the wapt account.

Next, I enter the two commands:
msktutil --server MYSERVER.domain.local --precreate --host $(hostname) -b ou=Provisioning,dc=domain,dc=local --service HTTP --description "host account for wapt server" --enctypes 24 -N
Then:
msktutil --server MYSERVER.domain.local --auto-update --keytab /etc/nginx/http-krb5.keytab --host $(hostname) -N

And nothing happens in the "provisioning" folder or any other test folder (so (which I've already done before with WAPT 2.3).

If I try to go a little further (installing Waptconsole on a Windows machine), I log in to the "waptconsole" configuration, the server address is OK, the username and password are correct, and I get this error message:



If anyone has any ideas, I'd appreciate it.

Thanks.

Gregory.

[dcardon]

Hello Gregory,

thank you for posting one question per topic, otherwise it's difficult to follow...

Could you please open a new topic with your latest problem?

I'm marking this topic as SOLVED.

Regards,

Denis