Hi.
I have a virtual host, that is configured with ldap authentication,
and this works well. The problem is that internal calls on the server
to the virtual host now require authentication as well.
How can I excluded localhost and selected sources from authentication
so that back-end processes don't require authentication ?
My current virtualhost configuration is as follows :
<VirtualHost 10.1.32.22:80>
SuexecUserGroup "#1010" "#1010"
ServerName amp-mysql.domain.com
ServerAlias amp-mysql
ServerAlias admin.amp-mysql.domain.com
DocumentRoot /home/amp-mysql/public_html
ErrorLog /var/log/virtualmin/amp-mysql.domain.com_error_log
CustomLog /var/log/virtualmin/amp-mysql.domain.com_access_log combined
ScriptAlias /cgi-bin/ /home/amp-mysql/cgi-bin/
ScriptAlias /awstats/ /home/amp-mysql/cgi-bin/
DirectoryIndex index.html index.htm index.php index.php4 index.php5
<Directory /home/amp-mysql/public_html>
Options -Indexes +IncludesNOEXEC +FollowSymLinks +ExecCGI
Order Deny,Allow
Allow from localhost
AddHandler cgi-script .pl
DirectoryIndex index.pl index.php
AllowOverride Limit FileInfo Indexes
AllowOverride All
AddHandler fcgid-script .php
AddHandler fcgid-script .php5
FCGIWrapper /home/amp-mysql/fcgi-bin/php5.fcgi .php
FCGIWrapper /home/amp-mysql/fcgi-bin/php5.fcgi .php5
##### LDAP
AuthType Basic
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPGroupAttributeIsDN off
AuthLDAPURL "ldap://10.1.32.2:3268
10.1.32.10:3268/DC=ad,DC=domain,DC=com?sAMAccountName?sub?(objectClass=*)"
NONE
AuthLDAPBindDN "CN=user.name,OU=HML Shared Accounts,DC=ad,DC=domain,DC=com"
AuthLDAPBindPassword password
AuthUserFile /dev/null
Require valid-user
AuthName "Restricted Dir [Domain Account]"
AuthLDAPGroupAttributeIsDN on
##### end LDAP #####
</Directory>
RewriteEngine on
RewriteCond %{HTTP_HOST} =webmail.amp-mysql.domain.com
RewriteRule ^(.*) https://amp-mysql.domain.com:20000/ [R]
RewriteCond %{HTTP_HOST} =admin.amp-mysql.domain.com
RewriteRule ^(.*) https://amp-mysql.domain.com:10000/ [R]
RemoveHandler .php
RemoveHandler .php5
IPCCommTimeout 31
<Files awstats.pl>
AuthName "amp-mysql.domain.com statistics"
AuthType Basic
AuthUserFile /home/amp-mysql/.awstats-htpasswd
require valid-user
</Files>
php_value memory_limit 32M
</VirtualHost>
Thanks
GM
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|