remove Kerberos authentication for specific Symfony routes

I have a Symfony 4 project that uses the Apache server to perform Kerberos authentication via Windows AD.
With the username obtained in this way, I then create a user via the Symfony Security System.

Now I want to make certain routes accessible to the user without any authentication.

This is my webserver configuration:

<Directory /var/www/SymfonyProjekt/public>
    AllowOverride All
    Order Allow,Deny
    Allow from All
    AuthType Kerberos
    AuthName "PLACEHOLDER"
    Krb5Keytab /etc/apache2/http.keytab
    KrbAuthRealms MY-WINDOWS-AD.DE
    KrbMethodNegotiate on
    KrbSaveCredentials  off
    Require valid-user
</Directory>

I have already tried several solutions like this one.
Unfortunately, the authentication then only worked for all pages or for none.

Does anyone have an idea for a working configuration?

Source: Symfony Questions

Was this helpful?

0 / 0

Leave a Reply 0

Your email address will not be published. Required fields are marked *