Apache authentication for httpd 2.4

Apache web server
Current: (2016-02-17)
For QAS:4.0 or later
  • Apache 2.4
  • Any HTTP server based on Apache HTTP 2.4
License:Resource Central

mod_auth_vas4 is an authentication and authorization module for use with the Apache web server 2.4. Derivatives including IBM HTTP Server and Oracle HTTP Server are also supported. NOTICE: mod_auth_vas_4 is not backwards compatible with earlier versions of Apache webserver, only webservers based on Apache's 2.4 API will work with mod_auth_vas4

The module uses Quest Authentication Services (QAS) to implement the HTTP SPNEGO protocol which provides passwordless authentication on web servers with optional fallback to password authentication. In effect, mod_auth_vas4 allows the Apache web server to perform Windows Integrated Authentication (single sign-on).

Browsers that can authenticate using SPNEGO automatically (without prompting for a password) include Internet Explorer, Firefox, Safari and Google Chrome.


The installation and how-to guides are good first-step and reference documents. The troubleshooting reference might also be handy. These documents should contain everything required to compile and install the module, as well as configuring client browsers and debugging if problems arise.


Packages for Apache 2.4 have "ap24" in their names Packages for Red Hat's httpd 2.4 have "http24" The RPMs should work on any RPM-based system, and the debs should work on any deb-based system. See below for information about packages for other systems.

Release: mod_auth_vas4-
Platform Filename Type Size Date MD5 checksum?
Other mod_auth_vas4 releases
linux-x86_64mod-auth-vas-ap24_4.0.2.3-1_amd64.debpackage83 kB2016-02-17674a5f82b5b9ae658361fbe98ccca999
mod-auth-vas-http24- kB2016-02-1729d757ae2dc1373e4f2b5f3d2f114856
sourcemod_auth_vas4- kB2016-02-179ab52ec22858f0d1ab0effb3e5aa3b66


The mod_auth_vas4 module is licensed free to use and modify. However, most of the module's functionality derives from Quest Authentication Services (QAS), which requires separate, user licensing.

No packages for your platform?

The mod_auth_vas4 module often needs to be compiled from source form for your particular version of Apache HTTPD. This is because the Apache web server's module API changes substantially between different releases and modules compiled for one version of the Apache web server will usually not work with any other version.

Resource Central does provide a few pre-compiled mod_auth_vas4 packages for some of the more popular and stable operating system distributions that include the Apache HTTP server by default. For other systems, you will need to compile the module for your installation.