Re: [users@httpd] Active Directory, Apache 2.2.2, and LDAP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, May 02, 2006 at 03:38:12PM -0400, Stewart, Eric wrote:

> 	It turns out that the following set up will work - but that you
> might get bitten by what I call an "AD Bug":
> 
> <Directory "/data1/webdocs/idriver">
    [...]
> </Directory>
> 
> This will work as expected, providing:
[problems]

I cannot say much about AD and default groups (I am not a windows
admin, fortunataly) but this works fine for me (2.0.58 at this time):

LoadModule ldap_module modules/mod_ldap.so
LoadModule auth_ldap_module modules/mod_auth_ldap.so
<Location /foo/>
  AuthType Basic
  AuthLDAPEnabled on
  AuthLDAPAuthoritative on
  AuthLDAPBindDN "DOMAIN\\User"
  AuthLDAPBindPassword veryverysecret
  AuthLDAPUrl
  ldap://yourdc.your.org:389/OU=Staff,DC=your,DC=org?sAMAccountName
  require valid-user
</Location

AuthLDAPBind* is used for initial authentication, since a regular user
cannot read sAMAccountName (my windows admins told me so)

> 	Feel free to start a discussion, provide insight/commentary, or
> ignore as usual.

;-))

HTH,
Rainer

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux