CentOS release 5.7 (Final)
nginx: nginx version: nginx/1.0.10
nginx: built by gcc 4.1.2 20080704 (Red Hat 4.1.2-51)
nginx: TLS SNI support disabled
nginx: configure arguments: --prefix=/opt/nginx --with-http_ssl_module --with-cc-opt=-Wno-error
--without-http_rewrite_module --add-module=/usr/local/rvm/gems/ruby-1.9.2-p290/gems/passenger-3.0.11/ext/nginx
-------- -------------------------------------------------------------------------
I created a text file with the configure parameters, but can't seem to find it. I see the following in the /opt/nginx-1.0.10/objs/Makefile though (I had to put the module @ /usr/local/lib64/spnego-http-auth-nginx-module):

objs/addon/spnego-http-auth-nginx-module/ngx_http_auth_spnego_module.o \

objs/addon/spnego-http-auth-nginx-module/ngx_http_auth_spnego_module.o \
objs/ngx_modules.o \
-lpthread -lcrypt /usr/local/rvm/gems/ruby-1.9.2-p290/gems/passenger-3.0.11/ext/nginx/../common/libpassenger _common.a /usr/local/rvm/gems/ruby-1.9.2-p290/gems/passenger-3.0.11/ext/nginx/../c
ommon/libboost_o xt.a -lstdc++ -lpthread -lm -lspnegohelp -lgssapi_krb5 -lssl -lcrypto -ldl -lz

objs/addon/spnego-http-auth-nginx-module/ngx_http_auth_spnego_module.o: $(ADDON_DEPS) \
/usr/local/lib64/spnego-http-auth-nginx-module/ngx_http_auth_spnego_module.c
$(CC) -c $(CFLAGS) $(ALL_INCS) \
-o objs/addon/spnego-http-auth-nginx-module/ngx_http_auth_spnego_module.o \
/usr/local/lib64/spnego-http-auth-nginx-module/ngx_http_auth_spnego_module.c

---------- ------------------------------------------------------------------------
My nginx.conf file has the following:

user appidentity;
worker_processes 2;

#error_log logs/error.log;
#error_log logs/error.log notice;
#error_log logs/error.log info;

#pid logs/nginx.pid;

events {
worker_connections 1024;
}

http {
passenger_root /usr/local/rvm/gems/ruby-1.9.2-p290/gems/passenger-3.0.11;
passenger_ruby /usr/local/rvm/wrappers/ruby-1.9.2-p290/ruby;

include mime.types;
default_type application/octet-stream;

#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';

#access_log logs/access.log main;

sendfile on;
#tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;

gzip on;
gzip_http_version 1.1;
gzip_comp_level 9;
gzip_types text/plain text/css
application/x-javascript text/xml
application/xml application/xml+rss
text/javascript;

server {
listen 80;
listen 443 ssl;
server_name servername.sub.domain.com;
ssl_certificate /etc/ssl/servername.sub.domain.com.crt;
ssl_certificate_key /etc/ssl/servername.sub.domain.com.key;
root /home/appidentity/apps/ticketee/current/public;
passenger_enabled on;
passenger_set_cgi_param HTTP_X_FORWARDED_PROTO $scheme;
auth_gss on;
auth_gss_realm sub.domain.com;
auth_gss_keytab /home/ticketeeapp.com/apps/ticketee/shared/http_servername.keytab;
auth_gss_service_name HTTP;
passenger_set_cgi_param REMOTE_USER $remote_user;
#charset koi8-r;

#access_log logs/host.access.log main;

location /admin/incomings {
#root html;
#index index.html index.htm;
auth_gss off;
allow 127.0.0.1;
deny all;
passenger_enabled on;
}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
#error_page 500 502 503 504 /50x.html;
#location = /50x.html {
# root html;
#}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
#location ~ \.php$ {
# root html;
# fastcgi_pass 127.0.0.1:9000;
# fastcgi_index index.php;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name;
# include fastcgi_params;
#}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
# include fastcgi_params;
#}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}

# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;

# location / {
# root html;
# index index.html index.htm;
# }
#}

# HTTPS server
#
#server {
# listen 443;
# server_name localhost;

# ssl on;
# ssl_certificate cert.pem;
# ssl_certificate_key cert.key;

# ssl_session_timeout 5m;

# ssl_protocols SSLv2 SSLv3 TLSv1;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;

# location / {
# root html;
# index index.html index.htm;
# }
#}

}

Would you be able to post your configuration?

Server OS, distro, kernel version, nginx version, libraries or package list, nginx configuration?

Obviously you can rename the specifics to your implementation, I would just love to know how you got a working configuration going as I have yet to be able to, however, the only network I have access to might be so complex that it might be impossible to "test" on to begin with

If you don't want to make it public, feel free to email me - mike@mike2k.com

I haven't really had any feedback on the module yet and would really like to try to get it matured more to be usable (especially in my own company's network)

Thanks!

Then I use this in my rails app by looking at request.env['REMOTE_USER']

I'm more than happy to work with someone if someone wants to help maintain, extend, etc.

Nice the github repository...

Has someone already been using this module in production?

I could not figure out how to get the realm stuff working at my work (only place with a proper Windows domain setup that I know of) - I tried my hardest but I don't know enough about how to set it up.

I am all for someone helping extend this and fix bugs. I just wanted to get the project started and sponsored the initial development.

Here's the project on github -
https://github.com/mike503/spnego-http-auth-nginx-module

I am more than happy to adjust settings as needed for people to be able to do development.