mod_ntlm_winbind question

[Eric Ladner]

Do you think it would be possible to modify this module to provide group
authentication capabilities?

For example, to allow members of an NT group to be passed through, something
like so:

blah blah...
NTLMGroup  SomeNTGroup SomeOtherNtGroup
Require    valid-user

That way, anybody who is a member of those two groups would get through without
noticing the authentication, but anyone else is blocked.

I think the smbauth mod does this, but it lacks the NTLM part for transparent
authentication.

Thanks,

Eric

> On Sat, 2004-08-28 at 14:09, abartlet at samba.org wrote:
> > Author: abartlet
> > Date: 2004-08-28 04:09:04 +0000 (Sat, 28 Aug 2004)
> > New Revision: 31
> >
> > WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=lorikeet&path=/trunk/mod_ntlm_winbind&rev=31&nolog=1
> >
> > Log:
> > Initial version of the re-written mod_ntlm_winbind.
>
> Which I should thank Tim Potter for - he did a *lot* of work cleaning up
> the mod_ntlm that was available a few years ago.  It's been sitting in
> our CVS for ages, now it's hosted in the lorikeet SVN repository.
>
> > This version of the module simply calls Samba's own ntlm_auth, and does not attempt to parse the NTLMSSP in any way.
> >
> > Portions inspired by some of the various other mod_ntlm
> > implementations out there.  My hope is that we can have one version of
> > this module, hosted in lorikeet.
> >
> > This is a module for Apache 1.3 only, an Apache2 version will be
> > required, and I've seen some examples that look promising.
>
> I've been wanting to update this for a while, and I finally got work
> time to put into it (new job ;-), and I hope to work with all the
> various mod_ntlm authors to make one single, maintained version.
>