[users@httpd] Apache, LDAP AUTH and directory access

["Gael Mauleon" <admin@xxxxxxxxxxxxxxxxx>]

Subject: LDAP Auth and Users Directory

From: Gael Mauleon <spamquipy@xxxxxxxx>

Newsgroups: comp.infosystems.www.servers.unix

 

Hi,

 

I have a few problems with the way I can use the LDAP auhtentification.

 

I want my users to view their directory with a basic authentification via

LDAP, and I don't want to modify my config file with every users I add.

 

Here is what I used for the test ->

 

 

UserDir /ftp/private

<Directory /ftp/private/*>

    Options MultiViews Indexes

    AuthType Basic

    AuthName "Private Zone"

    AuthLDAPUrl ldap://127.0.0.1:389/ou=users,ou=ftp,dc=test?uid?sub?

    AuthLDAPBindDN uid=avaliduidtologin,dc=test

    AuthLDAPBindPassword secret

    require valid-user

    <Limit GET POST>

            Order Deny,Allow

            Allow from All

    </Limit>

</Directory>

 

 

This is working quite well but unfortunatly with that, everyone can

authenticate into every directory, (bob can view with his login/pass the

directory of john).

 

So my question is :

 

Can I use some variable (contening requested directory for exemple) as a

filter to my ldap search or in the Allow directive so a user can log only

to his directory ??

 

Or perhaps (apart the .htaccess file), another solution exists ?

 

 

Thanks in advance.

Gael.