kare / ngx_http_auth_crowd_module

Provides Crowd authentication for Nginx

Nginx http auth crowd module

Configure and compile Nginx

$ ./configure --add-dynamic-module=../ngx_http_auth_crowd_module --with-debug --with-http_ssl_module
$ make modules

http://wiki.nginx.org/HttpSslModule https://www.nginx.com/resources/wiki/extending/converting/

Configuration example

server {
    location /restricted {
        auth_crowd              "Restricted Zone Realm";
        auth_crowd_url          "https://crowd.server.address.fi/crowd";
        auth_crowd_service      "crowd-authenticator-username";
        auth_crowd_password     "secret";
    }
}

Development

See get-started.sh for details.

Developer Links

• Emiller's Guide To Nginx Module Development

ngx_http_auth_crowd_module's Issues

Performance problems (module authenticates against crowd on each request)

Hey there Kare, great job on this module for nginx! 😄

Once I started using it on our systems, I noticed it was significantly slower than the Apache module.

After enabling debug on my crowd server and comparing the requests made vs the apache module, I realised that the reason the performance was worse was that an authentication request was sent for every single GET request against nginx. Apache only seems to send one request to Crowd and then keeps the user logged in.

Is there any way to offer similar behaviour?

Here are the test results with 100 requests sent to our dashboard using various forms of authentication:

Atlassian Crowd (Nginx)   : 162.766 secs
Atlassian Crowd (Apache)  : 33.797 secs
No Authentication (Nginx) : 2.068 secs

Any help would be greatly appreciated, I really don't want to switch back to Apache 😄

Cheers
Fotis

Not compiling on centos 6

Seems like there is an issue with find curl lib

./configure: error: the invalid value in --with-ld-opt="-llibcurl"
tried -lcurl as well

Question

Hey,
I just found this repository and got really excited. I've been looking for something like this. Followed this for some time: https://jira.atlassian.com/browse/CWD-2754

I am not that familiar with building my own nginx modules so I wanted to make sure I am doing the right think before I do anything stupid ^^
Is the module quite stable? For which version of crowd was it made?
If I wanted to add this module I would set my crowd url, user and pw in the gx_http_auth_crowd_module.c file and then compile nginx with configuration you posted?

Sry for opening an issue here. I didn't find another way to contact you and I really would love to get crowd auth working with nginx :)
regards
arne

Crowd answers with 505 HTTP Version Not Supported

I've been trying to get this module running with nginx (various versions, latest try was with 1.6.2) and Crowd (2.5.2 and 2.7.2) keeps answering with the same error message:

< HTTP/1.1 505 HTTP Version Not Supported
< Server: Apache-Coyote/1.1
< Date: Wed, 24 Sep 2014 12:37:54 GMT
< Connection: close
<
* Recv failure: Connection reset by peer
* Closing connection #0