{"action":"created","issue":{"url":"https://api.github.com/repos/MISP/MISP/issues/960","repository_url":"https://api.github.com/repos/MISP/MISP","labels_url":"https://api.github.com/repos/MISP/MISP/issues/960/labels{/name}","comments_url":"https://api.github.com/repos/MISP/MISP/issues/960/comments","events_url":"https://api.github.com/repos/MISP/MISP/issues/960/events","html_url":"https://github.com/MISP/MISP/issues/960","id":134691410,"number":960,"title":"External Auth feature additions","user":{"login":"wroersma","id":5068834,"avatar_url":"https://avatars.githubusercontent.com/u/5068834?v=3","gravatar_id":"","url":"https://api.github.com/users/wroersma","html_url":"https://github.com/wroersma","followers_url":"https://api.github.com/users/wroersma/followers","following_url":"https://api.github.com/users/wroersma/following{/other_user}","gists_url":"https://api.github.com/users/wroersma/gists{/gist_id}","starred_url":"https://api.github.com/users/wroersma/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wroersma/subscriptions","organizations_url":"https://api.github.com/users/wroersma/orgs","repos_url":"https://api.github.com/users/wroersma/repos","events_url":"https://api.github.com/users/wroersma/events{/privacy}","received_events_url":"https://api.github.com/users/wroersma/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/MISP/MISP/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/MISP/MISP/milestones/10","html_url":"https://github.com/MISP/MISP/milestones/release-2.6","labels_url":"https://api.github.com/repos/MISP/MISP/milestones/10/labels","id":1573450,"number":10,"title":"release-2.6","description":"","creator":{"login":"adulau","id":3309,"avatar_url":"https://avatars.githubusercontent.com/u/3309?v=3","gravatar_id":"","url":"https://api.github.com/users/adulau","html_url":"https://github.com/adulau","followers_url":"https://api.github.com/users/adulau/followers","following_url":"https://api.github.com/users/adulau/following{/other_user}","gists_url":"https://api.github.com/users/adulau/gists{/gist_id}","starred_url":"https://api.github.com/users/adulau/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adulau/subscriptions","organizations_url":"https://api.github.com/users/adulau/orgs","repos_url":"https://api.github.com/users/adulau/repos","events_url":"https://api.github.com/users/adulau/events{/privacy}","received_events_url":"https://api.github.com/users/adulau/received_events","type":"User","site_admin":false},"open_issues":25,"closed_issues":1,"state":"open","created_at":"2016-02-09T21:25:18Z","updated_at":"2016-05-13T16:19:58Z","due_on":null,"closed_at":null},"comments":9,"created_at":"2016-02-18T20:44:36Z","updated_at":"2016-05-17T09:25:03Z","closed_at":null,"body":"Is there any plan to add in ldap authentication support, or any other external authentication support?"},"comment":{"url":"https://api.github.com/repos/MISP/MISP/issues/comments/219665105","html_url":"https://github.com/MISP/MISP/issues/960#issuecomment-219665105","issue_url":"https://api.github.com/repos/MISP/MISP/issues/960","id":219665105,"user":{"login":"truckydev","id":17462115,"avatar_url":"https://avatars.githubusercontent.com/u/17462115?v=3","gravatar_id":"","url":"https://api.github.com/users/truckydev","html_url":"https://github.com/truckydev","followers_url":"https://api.github.com/users/truckydev/followers","following_url":"https://api.github.com/users/truckydev/following{/other_user}","gists_url":"https://api.github.com/users/truckydev/gists{/gist_id}","starred_url":"https://api.github.com/users/truckydev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/truckydev/subscriptions","organizations_url":"https://api.github.com/users/truckydev/orgs","repos_url":"https://api.github.com/users/truckydev/repos","events_url":"https://api.github.com/users/truckydev/events{/privacy}","received_events_url":"https://api.github.com/users/truckydev/received_events","type":"User","site_admin":false},"created_at":"2016-05-17T09:25:03Z","updated_at":"2016-05-17T09:25:03Z","body":"Here a sample I use : \r\n```ini\r\n<VirtualHost *:XXX>\r\n        ServerAdmin me@me.local\r\n        ServerName misp.local\r\n        DocumentRoot /var/www/MISP/app/webroot\r\n        <Directory /var/www/MISP/app/webroot>\r\n                Options -Indexes\r\n                AllowOverride FileInfo\r\n        </Directory>\r\n        <Location /users/login>\r\n            AuthType Kerberos\r\n            KrbMethodK5Passwd off\r\n            KrbLocaluserMapping on\r\n            KrbServiceName HTTP/my-ad-server@domain.com\r\n            Krb5Keytab /protect/directory/krb5.keytab\r\n            require valid-user\r\n        </Location>\r\n        LogLevel info\r\n        ErrorLog /my/directory/log/misp.error.log\r\n        CustomLog /my/directory/log/misp.access.log combined\r\n        ServerSignature Off\r\n</VirtualHost>\r\n```\r\n\r\nCan you take a look in your misp.local_error.log. \r\nIf needed make apache log in debug mod :).\r\n\r\nWith this sample configuration, you use sso with apache. You just protect /user/login with the <location> directive because misp don't folow the standard and the API is not in /api/ URI for exemple. If you d'ont use this trick, you can't acces to Misp by using the API.\r\n\r\nYour rewrite rules conf is normaly in .httaccess file, no ?\r\n\r\nHope this will helpful."}}