Setup Kerberos on Nginx in Ubuntu 16.04

There are several articles online to setup Kerberos Authentication. But while I was setting up Kerberos for my Rails Applications which runs on Nginx, it was difficult to find a single document which describes how it should be done end-to-end. I hope this simple guide will walk you through the process fairly quickly. On the other hand, this does not cover how Kerberos keytabs are generated as there are several details instructions already there online.

Assumptions

Keytab required for kerberos authentication from the server you want to communicate to the AD is generated. (this is unique and is generated using your fqdn.)

Setup Client Machine

Sample conf:

Replace XYZ.NET with your AD domain

3. Check if your Kerberos authentication is working with the krb5.conf and the generated keytab.

If it is successful , you will receive a message that Authenticated to Kerberos 5.

We need to compile Nginx from source to add spnego module to Nginx which smoothly handles Kerberos Authentication with Nginx. Another option is to add spnego module as dynamic module.

4. Check using command ‘nginx -V’ if the spnego module is added into nginx.

Make necessary code changes to login to the application.

Related posts:

I find myself once again at the beginning of a new venture. The circumstances may be a bit different (they are each time), but there are familiar feelings. These are feelings of uncertainty, of not…

You can sell a whisky cask at any time. It’s an active market, with plenty of demand. So you should be able to find a buyer, whenever you want to sell. That said, here are five tips to work out when…

Uninstall your antivirus software before installing Windows 10. Also, disable your firewall after you have downloaded Windows 10 but before. ciphersolving aid crossword clue 3 gear fidget spinner yc…