How to add Kerberos support to GLPI Docker without modifying the image?

[mat4-gys]

Hello

I'm currently running GLPI using the official Docker image (glpi-project/docker-glpi) and would like to enable Kerberos SSO (mod_auth_gssapi) authentication. However, I want to avoid rebuilding or customizing the Docker image itself.

Is there a recommended way to:

Install Kerberos client packages (e.g. krb5-user, libapache2-mod-auth-gssapi)

Provide a custom krb5.conf and .keytab

Enable the Apache auth_gssapi module

Update Apache virtual host to support AuthType GSSAPI

All without modifying the original Docker image?

Possible ideas I’m considering:

Using a sidecar container?

Mounting host binaries/modules into the GLPI container?

Overriding Apache configs with a mounted volume?

If there's any clean solution or best practice for adding Kerberos support dynamically, I'd really appreciate your guidance! 🙏

Thanks in advance,

[cedric-anne]

Hi,

To be honest, I am not even sure how Kerberos works. If you want to avoid overriding/rebuilding the GLPI image, then you should check if it is possible to configure proxy that handles the Kerberos authentication. If this is possible, then the solution would be to have a didicated "proxy" container that takes all the incoming requests, modify it to add the authentication headers, then send it to the GLPI container to get the response and forward it to the client.