<Directory /var/www/www.web.de/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
AuthzLDAPAuthoritative off
AuthBasicProvider ldap
AuthType Basic
AuthName "Wohin des Weges?"
AuthLDAPURL ldap://10.0.0.2/ou=people,dc=villa,dc=local?uid?sub
require valid-user
</Directory>
alternativ Windows 2003 R2
ServerAuthType Basic
AuthzLDAPAuthoritative off
AuthBasicProvider ldap
AuthName "Wohin des Weges?"
AuthLDAPURL ldap://10.0.0.1/ou=Benutzer,dc=example,dc=com?sAMAccountName?sub
AuthLDAPBindDN "cn=Administrator,cn=Users,dc=example,dc=com"
AuthLDAPBindpassword "test1234"
require valid-user
siehe auch: apache, apache-ssl
apache2
a2enmod proxy_http
a2enmod auth_ldap
a2enmod authnz_ldap
/etc/apache2/mods-available/proxy.conf : (Debian 5.0)
<IfModule mod_proxy.c>
#turning ProxyRequests on and allowing proxying from all may allow
#spammers to use your proxy to send email.
ProxyRequests Off
ProxyPass / http://www.naturnah.de/
ProxyPassReverse / http://www.naturnah.de/
<Proxy *>
Order deny,allow
Deny from all
Allow from all
AuthType Basic
AuthBasicProvider ldap
AuthName "Geschuetzter Bereich"
AuthLDAPURL "ldap://notebook02:389/ou=people,dc=example,dc=com?uid?sub?(objectClass=PosixAccount)"
require valid-user
</Proxy>
# Enable/disable the handling of HTTP/1.1 "Via:" headers.
# ("Full" adds the server version; "Block" removes all outgoing Via: headers)
# Set to one of: Off | On | Full | Block
ProxyVia On
</IfModule>
/etc/init.d/apache2 force-reload
Todo:
ldap-status hinzufügen http://httpd.apache.org/docs/2.2/mod/mod_ldap.html#exampleconfig