Mod_auth_kerb is an Apache module designed to provide Kerberos user authentication to the Apache web server. Using the Basic Auth mechanism, it retrieves a username/password pair from the browser and checks them against a Kerberos server as set up by your particular organization. It also supports mutual ticket authentication, although most browsers do not support that natively.
| Tags | Internet Web HTTP Servers Security |
|---|---|
| Licenses | Freeware |
| Operating Systems | OS Independent |
| Implementation | C |
Recent releases


Changes: A fix for an incompatibility bug introduced in 4.12 involving compiling the module against Apache 2.


Changes: This release fixes a couple of minor bugs in 4.11. A patch was added to fix possible credential cache collisions when KrbDefaultInstance is set. A custom krb5_sname_to_principal was also added, because krb5's was doing something that was breaking some multi-realm setups when used with mod_auth_kerb.


Changes: This release has been updated to support the Apache 2.0 API via a -DAPXS2 flag. It's ugly, but it will have to do until 5.0 is finished.


Changes: This release fixes a bug involving a #define used where an #ifdef should have been.


Changes: This version fixes a bug that made mod_auth_kerb crash under various Linux's with newer Kerberos releases. It also fixes some return values so they don't generate warnings. NOTE: Users of pre-1.1 Kerberos V5 releases will need to add a KRB5LEGACY flag to their list of compile time defines now.