I found
mod_auth_gssapi httpd module very useful in enterprise environment - especially for Kerberos authentication (using keytab). Could you please add it to repository?
Source: gssapi/mod_auth_gssapi
I have successfully compiled it by myself using tools provided in AIX Toolbox and AIX.
Below I provide steps for getting it works - maybe it will be helpful for other and speed-up process of providing this package in AIX Toolbox :)
Preparation
yum install make.ppc autoconf libtool m4 gcc gawk bison flex tar.ppc httpd-devel krb5-devel krb5-pkinit-openssl -y
ln -s /opt/freeware/bin/gcc /usr/bin/gcc
There is also needed package from PIP repository:
pip install gssapi
Get sources of module from GIT repository:
wget
https://github.com/gssapi/mod_auth_gssapi/archive/refs/heads/master.zip
Unzip it in separate directory:
mkdir /tmp/gssapi
cd /tmp/gssapi
unzip master.zip
Compilation
export PATH=$PATH:/opt/freeware/bin
export M4=/opt/freeware/bin/m4
autoreconf -fi
OPENSSL_LIBS="-L/usr/lib -lssl -lcrypt" OPENSSL_CFLAGS="-I/usr/include/openssl" ./configure
Edit (or use sed
) below files and change text lib64 to lib:
Makefile
config.status
Final compilation:
make
Installation
Simply place output module into httpd module's directory:
cp ./src/.libs/mod_auth_gssapi.so /opt/freeware/lib/httpd/modules/
Then you can use module in httpd Apache configuration as on any Linux platform:
LoadModule auth_gssapi_module /opt/freeware/lib/httpd/modules/mod_auth_gssapi.so