SPNEGO

The SPNEGO Auth module adds SPNEGO support to F5 NGINX Plus. Currently, only Kerberos authentication via GSSAPI is supported.

Installation

1. Check the Technical Specifications page to verify that the module is supported by your operating system.

2. Make sure that your operating system is configured to retrieve binary packages from the official NGINX Plus repository. See installation instructions for your operating system on the Installing NGINX Plus page.

3. Install the SPNEGO Auth module package nginx-plus-module-auth-spnego from the official NGINX Plus repository.

   For Amazon Linux 2, CentOS, Oracle Linux, and RHEL:

   sudo yum update && \
   sudo yum install nginx-plus-module-auth-spnego

   For Amazon Linux 2023, AlmaLinux, Rocky Linux:

   sudo dnf update && \
   sudo dnf install nginx-plus-module-auth-spnego

   For Debian and Ubuntu::

   sudo apt update && \
   sudo apt install nginx-plus-module-auth-spnego

   For SLES:

   sudo zypper refresh && \
   sudo zypper install nginx-plus-module-auth-spnego

   For Alpine:

   apk add nginx-plus-module-auth-spnego

   For FreeBSD:

   sudo pkg update && \
   sudo pkg install nginx-plus-module-auth-spnego

Configuration

After installation you will need to enable and configure the module in F5 NGINX Plus configuration file nginx.conf.

1. Enable dynamic loading of the module with the load_module directive specified in the top-level (“main”) context:

   load_module modules/spnego-http-auth-nginx-module.so;
   
   http {
       # ...
   }

2. Perform additional configuration as required by the module.

3. Test the NGINX Plus configuration. In a terminal, type-in the command:

   nginx -t

   Expected output of the command:

   nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
   nginx: configuration file /etc/nginx/nginx.conf is successful

4. Reload the NGINX Plus configuration to enable the module:

   nginx -s reload

More info

• NGINX module for HTTP SPNEGO auth GitHub poject

• NGINX dynamic modules

• NGINX Plus technical specifications

• Uninstalling a dynamic module