Hi Nathan,

On your page (http://blank.org/memory/output/rt-ad-sso.html) you say to
let you know if anyone gets NTLM2 working. I just did...

FC4
Apache 2.2.3
mod_perl-2.0.2
rt-3.4.6
mod_ntlm2-0.1

Initial install was per the RT install guide, using mod_perl.

To build mod_ntlm2 I had to:

1)       set PATH so make found apxs

2)       Remove 'static' from variable declarations in smbval/smblib.inc.c

3)       Change mod_ntlm.c to call apr_pool_create_ex instead of apr_pool_sub_make

4)       Change Makefile to install mod_ntlm.la instead of mod_ntlm.so


PATH was set as: PATH=$PATH:/usr/local/apache2/bin

Mod_ntlm2-0.1 files were changed as follows:

 
[root@hotel src]# diff -c -r mod_ntlm*
Only in mod_ntlm2-0.1-fixed: .libs
diff -c -r mod_ntlm2-0.1/Makefile mod_ntlm2-0.1-fixed/Makefile
*** mod_ntlm2-0.1/Makefile      2003-02-26 00:25:42.000000000 +1300
--- mod_ntlm2-0.1-fixed/Makefile        2006-11-01 08:14:53.000000000
+1300
***************
*** 17,23 ****
 
  #   install the shared object file into Apache
  install: all
!       $(APXS) -i -a -n 'ntlm' mod_ntlm.so
 
  #   cleanup
  clean:
--- 17,23 ----
 
  #   install the shared object file into Apache
  install: all
!       $(APXS) -i -a -n 'ntlm' mod_ntlm.la
 
  #   cleanup
  clean:
diff -c -r mod_ntlm2-0.1/mod_ntlm.c mod_ntlm2-0.1-fixed/mod_ntlm.c
*** mod_ntlm2-0.1/mod_ntlm.c    2003-02-24 04:58:02.000000000 +1300
--- mod_ntlm2-0.1-fixed/mod_ntlm.c      2006-11-01 10:21:52.000000000
+1300
***************
*** 587,593 ****
          return NULL;
      }
 
!     apr_pool_sub_make(&sp,p,NULL);
 
      while (!(ap_cfg_getline(l, MAX_STRING_LEN, f))) {
          if ((l[0] == '#') || (!l[0]))
--- 587,599 ----
          return NULL;
      }
 
!     /*
!      * apr_pool_sub_make(&sp,p,NULL);
!      *
!      * This function call is not longer available with apache 2.2
!      * Try replacing it with apr_pool_create_ex()
!      */
!     apr_pool_create_ex(&sp,p,NULL,NULL);
 
      while (!(ap_cfg_getline(l, MAX_STRING_LEN, f))) {
          if ((l[0] == '#') || (!l[0]))
Only in mod_ntlm2-0.1-fixed: mod_ntlm.la
Only in mod_ntlm2-0.1-fixed: mod_ntlm.lo
Only in mod_ntlm2-0.1-fixed: mod_ntlm.o
Only in mod_ntlm2-0.1-fixed: mod_ntlm.slo
diff -c -r mod_ntlm2-0.1/smbval/smblib.inc.c
mod_ntlm2-0.1-fixed/smbval/smblib.inc.c
*** mod_ntlm2-0.1/smbval/smblib.inc.c   2003-02-21 14:55:14.000000000
+1300
--- mod_ntlm2-0.1-fixed/smbval/smblib.inc.c     2006-11-01
07:45:35.000000000 +1300
***************
*** 22,29 ****
  #include <stdio.h>
  #include <malloc.h>
 
! static int SMBlib_errno;
! static int SMBlib_SMB_Error;
  #define SMBLIB_ERRNO
  #define uchar unsigned char
  #include "smblib-priv.h"
--- 22,29 ----
  #include <stdio.h>
  #include <malloc.h>
 
! int SMBlib_errno;
! int SMBlib_SMB_Error;
  #define SMBLIB_ERRNO
  #define uchar unsigned char
  #include "smblib-priv.h"
***************
*** 32,38 ****
 
  #include <signal.h>
 
! static SMB_State_Types SMBlib_State;
 
  /* Initialize the SMBlib package     */
  static int
--- 32,38 ----
 
  #include <signal.h>
 
! SMB_State_Types SMBlib_State;
 
  /* Initialize the SMBlib package     */
  static int
 
 
 
Virtual server defined as:
 
<VirtualHost *:80>
    ServerName rt.my.domain
    DocumentRoot "/opt/rt3/share/html"
    AddDefaultCharset UTF-8
 
    <Directory "/opt/rt3/share/html">
        AuthName "Request Tracker"
        AuthType NTLM
        NTLMAuth on
        NTLMAuthoritative on
        NTLMDomain my.domain
        NTLMServer dc1
        NTLMBackup dc2
    </Directory>

    # this line applies to Apache2+mod_perl2 only
    # Below line might be incorrect, I had to use:
    #     PerlModule Apache2::compat
    # mod_perl 2.0.1 from FC4 Linux
    #PerlModule Apache2 Apache::compat
    PerlModule Apache2::compat
    PerlModule Apache::DBI
    PerlRequire /opt/rt3/bin/webmux.pl
    <Location />
        SetHandler perl-script
        PerlHandler RT::Mason
    </Location>
    <Location /REST/1.0/NoAuth>
        satisfy any
        allow from all
    </Location>
    <Location /NoAuth>
        satisfy any
        allow from all
    </Location>
    <Location /NoAuth/images>
        satisfy any
        allow from all
    </Location>
    ErrorLog logs/rt.my.domain-error_log
    CustomLog logs/rt.my.domain-access_log common
</VirtualHost>

Otherwise, just as you recommended.