https://blog.it-kb.ru/2017/03/30/deploy-and-configure-icinga-2-on-debian-8-part-10-icinga-web-2-external-authentication-in-apache-with-kerberos-sso-and-pam-and-authorization-with-active-directory-ldap/