Need some help about SSO on Linux. I choose AuthenNTLM for customer
autorization using AD credentials.
I have made such changes in otrs.conf
# ErrorDocument 403 /otrs/customer.pl
ErrorDocument 403 /otrs/index.pl
SetHandler perl-script
PerlResponseHandler ModPerl::Registry
Options +ExecCGI
PerlOptions +ParseHeaders
PerlOptions +SetupEnv
PerlAuthenHandler Apache2::AuthenNTLM
AuthType ntlm,basic
AuthName Basic
require valid-user
PerlAddVar ntdomain "KE kesrv1"
PerlSetVar defaultdomain KE
PerlSetVar splitdomainprefix 1
PerlSetVar ntlmdebug 2
Order allow,deny
Allow from all
{'Customer::AuthModule'} =
'Kernel::System::CustomerAuth::HTTPBasicAuth';
$Self->{CustomerPanelLoginURL} = 'http://otrs/otrs/customer.pl';
$Self->{CustomerPanelLogoutURL} = 'http://otrs/otrs/customer.pl';
and comment all other customer's autorization methods.
I try to get access to otrs from WindowsXP using IE, when i enter
http:/otrs/otrs/customer.pl, i get login/password form, but when i press ok,
i see this
Internal Server Error
The server encountered an internal error or misconfiguration and was unable
to complete your request.
looking at Apache error.log
[1148] AuthenNTLM: Authorization Header NTLM
TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAAD2==
[1148] AuthenNTLM: Got: 78 84 76 77 83 83 80 0 1 0 0 0 7 130 8 162 0 0 0 0 0
0 0 0 0 0 0 0 0 0 0 0 5 1 40 10 0 0 0 15
[1148] AuthenNTLM: protocol=NTLMSSP, type=1,
flags1=7(NEGOTIATE_UNICODE,NEGOTIATE_OEM,REQUEST_TARGET),
flags2=130(NEGOTIATE_ALWAYS_SIGN,NEGOTIATE_NTLM), domain length=0, domain
offset=0, host length=0, host offset=0, host=, domain=
[1148] handler type == 1
[1148] AuthenNTLM: Connect to pdc = kesrv1 bdc = domain = ke
[1148] AuthenNTLM: enter lock
[1148] AuthenNTLM: verify handle smbhandle == 0
[Thu Jul 01 00:04:25 2010] [error] Connect to SMB Server failed (pdc =
kesrv1 bdc = domain = ke error = -11/0) for /otrs/customer.pl
[1148] AuthenNTLM: leave lock
[Thu Jul 01 00:04:25 2010] [error] Cannot get nonce
i have tried to set domain and pdc's names in FQDN form, but it was useless.
What should i do?
P.S. I used this article
http://wiki.otrs.org/index.php?title=Implementing_Single_Sign_On_on_Linux_wi...
tried to search in other places with no success.
Pavel Gandalipov