Apache HTTPD is generally compatible with Moonshot through the use of an Apache GSS-API module. At the moment, packaging is not available for the module meaning you have to build it yourself.
In the tables below, the following icons have the following meanings:
- - This version of the software has been tested and verified as supporting Moonshot.
- - This version of the software has been tested and verified as not supporting Moonshot.
- - This version of the software has not yet been tested thoroughly and its status is not known. Let us know if you have tried it and whether it worked or not!
2.2. Compatibility List
Note that accessing supported versions of this software requires a Moonshot compatible client - see the next section for details on which clients are supported.
Any versions not listed below have not yet been tested. If you do so, please let us know!
|Apache 2.4||Using the Moonshot mod_auth_gssapi or the Github GSSAPI Negotiate module|
|Apache 2.2||Using the Moonshot mod_auth_gssapi module|
3. Installation & Configuration
How you set up a Moonshot-enabled version of the Apache HTTP server will differ depending on your OS. See the relevant pages for your particular distribution:
Instructions for building the module manually for RHEL-based platforms can be found here.
4. Client Compatibility
The following clients are known to work with this server software using Moonshot authentication (click on the link to see further information about enabling Moonshot in that client):
5. Next Steps
Once you have installed the software, what happens next?
5.1. Account Mapping
The simplest way to test the Apache Moonshot integration is to create a simple script, protected by Moonshot. To do this, do the following:
Create a simple script to protect by creating a directory for cgi scripts.
Create a script in that directory called "hello.cgi" with the following content:
Set the permissions appropriately:
Configure Apache to protect this location, by creating a file at
/etc/apache2/conf.d/moonshot.confwith the following content:
- Test by browsing to with a compatible browser.
6.1. mod_shib Shibboleth module incompatibility
This module is currently not compatible with the Shibboleth2 service provider Apache module. When testing or using the Moonshot module, disable the Shibboleth module and restart the webserver before attempting your test. We are attempting to resolve this problem.
One of the symptoms of this incompatibility is text similar to the below in the Apache error log (error_log):
To resolve this error, disable the Shibboleth module.
6.2. AppArmor and SELinux
Ubuntu's AppArmor and the RedHat SELinux systems are also known to interfere with Apache's loading of the Moonshot module. Follow the appropriate operating system's instructions on how to allow Apache to access files outside its assigned directories.