<Directory /var/www/www.web.de/> Options Indexes FollowSymLinks MultiViews AllowOverride None Order allow,deny allow from all AuthzLDAPAuthoritative off AuthBasicProvider ldap AuthType Basic AuthName "Wohin des Weges?" AuthLDAPURL ldap://10.0.0.2/ou=people,dc=villa,dc=local?uid?sub require valid-user </Directory>
alternativ Windows 2003 R2
ServerAuthType Basic AuthzLDAPAuthoritative off AuthBasicProvider ldap AuthName "Wohin des Weges?" AuthLDAPURL ldap://10.0.0.1/ou=Benutzer,dc=example,dc=com?sAMAccountName?sub AuthLDAPBindDN "cn=Administrator,cn=Users,dc=example,dc=com" AuthLDAPBindpassword "test1234" require valid-user
siehe auch: apache, apache-ssl
apache2
a2enmod proxy_http
a2enmod auth_ldap
a2enmod authnz_ldap
/etc/apache2/mods-available/proxy.conf
: (Debian 5.0)
<IfModule mod_proxy.c> #turning ProxyRequests on and allowing proxying from all may allow #spammers to use your proxy to send email. ProxyRequests Off ProxyPass / http://www.naturnah.de/ ProxyPassReverse / http://www.naturnah.de/ <Proxy *> Order deny,allow Deny from all Allow from all AuthType Basic AuthBasicProvider ldap AuthName "Geschuetzter Bereich" AuthLDAPURL "ldap://notebook02:389/ou=people,dc=example,dc=com?uid?sub?(objectClass=PosixAccount)" require valid-user </Proxy> # Enable/disable the handling of HTTP/1.1 "Via:" headers. # ("Full" adds the server version; "Block" removes all outgoing Via: headers) # Set to one of: Off | On | Full | Block ProxyVia On </IfModule>
/etc/init.d/apache2 force-reload
Todo:
ldap-status hinzufügen http://httpd.apache.org/docs/2.2/mod/mod_ldap.html#exampleconfig