You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Aaron Sturm <aa...@hotmail.com> on 2003/01/02 09:11:43 UTC
[users@httpd] apache ldap authentication
After apache authenticates a user, is there a way I can pass the username to
a CGI? Or do I have to create a login page and have the CGI do the ldap
authentication?
Thanks,
Aaron
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] apache ldap authentication
Posted by Aaron Sturm <aa...@hotmail.com>.
Thanks Rich, that's exactly the type of information I was looking for. I
just wasn't sure if I could get that information. I need the username
because the page is dynamic based on the user.
Thanks again,
Aaron
----- Original Message -----
From: "Rich Bowen" <rb...@rcbowen.com>
To: <us...@httpd.apache.org>
Sent: Thursday, January 02, 2003 3:30 AM
Subject: Re: [users@httpd] apache ldap authentication
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Thu, 2 Jan 2003, Aaron Sturm wrote:
>
> > After apache authenticates a user, is there a way I can pass the
username to
> > a CGI? Or do I have to create a login page and have the CGI do the ldap
> > authentication?
>
> The username is available in the environment variable REMOTE_USER
>
> However ...
>
> I think that you may be making this harder than necessary. There are
> modules, available from http://modules.apache.org/ , which will let you
> authenticate directly against your LDAP server. By installing one of
> those modules, you will simplify this process, and not have to figure
> out how to make LDAP connections from your CGI. It will also be faster,
> and less possible to circumvent.
>
> - --
> Rich Bowen - rbowen@rcbowen.com
> Author - Apache Administrator's Guide
> http://www.ApacheAdmin.com/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Made with pgp4pine 1.75-6
>
> iD8DBQE+FCLhXP03+sx4yJMRAqQ7AKCiPi0WyvhmBajvOOtXEgySCrAnMgCgtD9l
> xY+nt0aEPb53PM0vPKpIG3Y=
> =Su51
> -----END PGP SIGNATURE-----
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] apache ldap authentication
Posted by Rich Bowen <rb...@rcbowen.com>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thu, 2 Jan 2003, Aaron Sturm wrote:
> After apache authenticates a user, is there a way I can pass the username to
> a CGI? Or do I have to create a login page and have the CGI do the ldap
> authentication?
The username is available in the environment variable REMOTE_USER
However ...
I think that you may be making this harder than necessary. There are
modules, available from http://modules.apache.org/ , which will let you
authenticate directly against your LDAP server. By installing one of
those modules, you will simplify this process, and not have to figure
out how to make LDAP connections from your CGI. It will also be faster,
and less possible to circumvent.
- --
Rich Bowen - rbowen@rcbowen.com
Author - Apache Administrator's Guide
http://www.ApacheAdmin.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Made with pgp4pine 1.75-6
iD8DBQE+FCLhXP03+sx4yJMRAqQ7AKCiPi0WyvhmBajvOOtXEgySCrAnMgCgtD9l
xY+nt0aEPb53PM0vPKpIG3Y=
=Su51
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] apache ldap authentication
Posted by Aaron Sturm <aa...@hotmail.com>.
Sam,
It was a pain for me.. hopefully your experience will be better. I'm using
solaris 8 also.
After you installed the Sun LDAP libraries, did you make CFLAGS and LDFLAGS
point to the lib and include directories where ldap is installed? Set those
and try it again. I used openldap for my install.
-Aaron
----- Original Message -----
From: "Sam K Tan" <sa...@sun.com>
To: <us...@httpd.apache.org>
Sent: Thursday, January 02, 2003 12:57 AM
Subject: Re: [users@httpd] apache ldap authentication
> Aaron,
>
> Totally out of bounds but perhaps somewhat related to your question ...
>
> How did you get Apache to work with LDAP? I've tried downloading the
source
> 2.0.43 and the Sun/iPlanet LDAP SDK and played with the configure options,
> but no matter what I do, I can't get it to compile. The configure script
> always bombs out with a "could not find an LDAP library" error message.
This
> occurs in srclib/apr-util.
>
> BTW, I'm using Solaris 8.
>
> On 2/1/03 16:11, "Aaron Sturm" <aa...@hotmail.com> wrote:
>
> > After apache authenticates a user, is there a way I can pass the
username to
> > a CGI? Or do I have to create a login page and have the CGI do the ldap
> > authentication?
> >
> > Thanks,
> > Aaron
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server
Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
> Sam K Tan samktan@sun.com
> Product Technologist m. +65 96669541
> Operating Environments Ambassador f. +65 64387646
> Security Technologies Ambassador d. +65 62397807
> HPC Ace
>
> Asking if a computer can think
> is like asking if a submarine can swim.
> E. W. Djikstra
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] apache ldap authentication
Posted by Sam K Tan <sa...@sun.com>.
Aaron,
Totally out of bounds but perhaps somewhat related to your question ...
How did you get Apache to work with LDAP? I've tried downloading the source
2.0.43 and the Sun/iPlanet LDAP SDK and played with the configure options,
but no matter what I do, I can't get it to compile. The configure script
always bombs out with a "could not find an LDAP library" error message. This
occurs in srclib/apr-util.
BTW, I'm using Solaris 8.
On 2/1/03 16:11, "Aaron Sturm" <aa...@hotmail.com> wrote:
> After apache authenticates a user, is there a way I can pass the username to
> a CGI? Or do I have to create a login page and have the CGI do the ldap
> authentication?
>
> Thanks,
> Aaron
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
Sam K Tan samktan@sun.com
Product Technologist m. +65 96669541
Operating Environments Ambassador f. +65 64387646
Security Technologies Ambassador d. +65 62397807
HPC Ace
Asking if a computer can think
is like asking if a submarine can swim.
E. W. Djikstra
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org