Authenication

[Matt Williams <wm...@googlemail.com>]

Hello all,

I was looking at the various authentication methods that may be available
in Traffic Server. Ideally I'd like something a little more than Basic
Authentication and was really interested in, what appeared to be, the
possibility of configuring an LDAP based setup. Some of the documentation
suggests this is possible:
http://trafficserver.apache.org/docs/v2/admin/files.htm#filter.config

Having made some attempts to get this working I'm actually now not sure
that it is still part of the functionality. I've done some poking around in
the code and can't seem to find any references that look promising (I am,
however, purely getting started with a lot of this for the first time and
so I don't underestimate the potential of my own incompetence!).

If it is no longer part of core functionality then I see it as something
that potentially could be done with the aide of a plugin. I would be
extremely grateful if someone could point me in the right direction with
this, or could share any samples they might have of an LDAP authentication
plugin.

Thanks,

Matt.

Re: Authenication

[Leif Hedstrom <zw...@apache.org>]

On 3/21/12 2:56 AM, Matt Williams wrote:
> Hello all,
>
> I was looking at the various authentication methods that may be available 
> in Traffic Server. Ideally I'd like something a little more than Basic 
> Authentication and was really interested in, what appeared to be, the 
> possibility of configuring an LDAP based setup. Some of the documentation 
> suggests this is possible: 
> http://trafficserver.apache.org/docs/v2/admin/files.htm#filter.config

For good (or bad), all the authentication stuff had to be removed before we 
open sourced ATS. This unfortunately also includes filter.config, for some 
unknown reasons, authentication and authorization were combined into one 
feature (and module).

The goal is to reimplement these features as plugins.  I don't know of any 
such projects underway, I know Yahoo had an OAuth plugin for example, but I 
don't know if it will ever be Open Sourced. So, you are pretty much spot on, 
this needs work, and we're definitely looking for people to contribute 
plugins in this area. It's entirely possible this means adding additional 
APIs to the plugin APIs, but that is completely ok with us. :)

Cheers,

-- Leif