所有你需要的是
mod_auth_sspi Apache模块。
样品配置:
AuthType SSPI
SSPIAuth On
SSPIAuthoritative On
SSPIDomain mydomain
# Set this if you want to allow access with clients that do not support NTLM,or via proxy from outside. Don't forget to require SSL in this case!
SSPIOfferBasic On
# Set this if you have only one domain and don't want the MYDOMAIN\ prefix on each user name
SSPIOmitDomain On
# AD user names are case-insensitive,so use this for normalization if your application's user names are case-sensitive
SSPIUsernameCase Lower
AuthName "Some text to prompt for domain credentials"
Require valid-user
并且不要忘记你也可以use Firefox for transparent SSO in a Windows domain:只需转到:config,搜索network.automatic-ntlm-auth.trusted-uris,并输入您的内部应用程序的主机名或FQDN(如myserver或myserver.corp .domain.com)。您可以有多个条目,它是一个逗号分隔的列表。