RE: [users@httpd] Auth Apache 2 agaisnt AD Groups

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Works here:

AuthName "some name here"
AuthType Basic
AuthLDAPBindDN "apropriate info here"
AuthLDAPBindPassword password
AuthLDAPAuthoritative on
AuthLDAPRemoteUserIsDN on
AuthLDAPGroupAttribute member
AuthLDAPGroupAttributeIsDN on
AuthLDAPURL
"ldap://server.name/OU==Divisions,OU=Users,OU=gactr,DC=gc,DC=nat?sAMAccountNa
me?sub?(objectclass=*)"

<Limit GET>
        Require group CN=NSS,OU=Networking Support Services,OU=Information
Technology Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat
        Require group CN=WSS,OU=Workstation Support Services,OU=Information
Technology Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat
        Require group CN=PSS,OU=Programming Support Services,OU=Information
Technology Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat
        Require group CN=ITS-adm,OU=Information Technology
Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat
</Limit>

Where the CN's are "security group - global" in AD. Hope this helps.

---------------------------------------
Robin P. Blanchard
Systems Integration Specialist
Georgia Center for Continuing Education
fon: 706.542.2404 < > fax: 706.542.6546
---------------------------------------
 

> -----Original Message-----
> From: Aaron Axelsen [mailto:lists@xxxxxxxxxxxx] 
> Sent: Wednesday, May 24, 2006 3:28 PM
> To: users@xxxxxxxxxxxxxxxx
> Subject: [users@httpd] Auth Apache 2 agaisnt AD Groups
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>  
> Is it possible to authentication apache2 agaisnt Active 
> Directory 2003 groups?  I've been able to successful auth AD 
> users, and auth according to current ou's, but I haven't seen 
> anything about going agaisnt an AD group.  Is it doable?
> 
> Thanks,
> 
> - --
> Aaron Axelsen
> lists@xxxxxxxxxxxx
> 
> Great hosting, low prices.  Modevia Web Services LLC -- 
> http://www.modevia.com -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2.2 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>  
> iD8DBQFEdLO0uucONIvD0AMRAquLAJ9XkWq4Y205qj4+uacSik6kWB1jWACg59oX
> IWe6a/rZ7A7ZnMjnOmgYbdY=
> =/BBC
> -----END PGP SIGNATURE-----
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux