You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@httpd.apache.org by Gael Mauleon <ad...@premiere-heure.fr> on 2005/07/11 14:39:30 UTC

[users@httpd] Apache, LDAP AUTH and directory access

Subject: LDAP Auth and Users Directory

From: Gael Mauleon <sp...@yahoo.fr>

Newsgroups: comp.infosystems.www.servers.unix

 

Hi,

 

I have a few problems with the way I can use the LDAP auhtentification.

 

I want my users to view their directory with a basic authentification via 

LDAP, and I don't want to modify my config file with every users I add.

 

Here is what I used for the test ->

 

 

UserDir /ftp/private

<Directory /ftp/private/*>

    Options MultiViews Indexes

    AuthType Basic

    AuthName "Private Zone"

    AuthLDAPUrl ldap://127.0.0.1:389/ou=users,ou=ftp,dc=test?uid?sub?

    AuthLDAPBindDN uid=avaliduidtologin,dc=test

    AuthLDAPBindPassword secret

    require valid-user

    <Limit GET POST>

            Order Deny,Allow

            Allow from All

    </Limit>

</Directory>

 

 

This is working quite well but unfortunatly with that, everyone can 

authenticate into every directory, (bob can view with his login/pass the 

directory of john).

 

So my question is : 

 

Can I use some variable (contening requested directory for exemple) as a 

filter to my ldap search or in the Allow directive so a user can log only 

to his directory ??

 

Or perhaps (apart the .htaccess file), another solution exists ?

 

 

Thanks in advance.

Gael.

RE: [users@httpd] Apache, LDAP AUTH and directory access

Posted by Gael Mauleon <ad...@premiere-heure.fr>.

Thanks for the advice, I was secretly hoping it was nativly implemented
thought :-(

 

 

  _____  

De : Saqib.N.Ali@seagate.com [mailto:Saqib.N.Ali@seagate.com] 
Envoyé : lundi 11 juillet 2005 15:53
À : users@httpd.apache.org
Objet : Re: [users@httpd] Apache, LDAP AUTH and directory access

 


Hello, 

You might have to create containers for each user. e.g.: (Notice "require
saqib" instead of "require valid-user" 

<Directory /ftp/private/gael> 
    Options MultiViews Indexes 
    AuthType Basic 
    AuthName "Private Zone" 
    AuthLDAPUrl ldap://127.0.0.1:389/ou=users,ou=ftp,dc=test?uid?sub? 
    AuthLDAPBindDN uid=avaliduidtologin,dc=test 
    AuthLDAPBindPassword secret 
    require gael 
    <Limit GET POST> 
            Order Deny,Allow 
            Allow from All 
    </Limit> 
</Directory> 

<Directory /ftp/private/saqib> 
    Options MultiViews Indexes 
    AuthType Basic 
    AuthName "Private Zone" 
    AuthLDAPUrl ldap://127.0.0.1:389/ou=users,ou=ftp,dc=test?uid?sub? 
    AuthLDAPBindDN uid=avaliduidtologin,dc=test 
    AuthLDAPBindPassword secret 
    require saqib 
    <Limit GET POST> 
            Order Deny,Allow 
            Allow from All 
    </Limit> 
</Directory> 
... etc 

Covalent < http://www.covalent.com >  provides mod_ftp <
http://www.covalent.net/webinar/mod_ftp-Webinar.ppt > which does exactly
what you are trying to do. And they make administration extremely easy
through the use of a GUI. Take a look at that as well. 

Thanks.
Saqib Ali
http://www.xml-dev.com/blog/ 




"Gael Mauleon" <ad...@premiere-heure.fr> 
No Phone Info Available 

07/11/2005 05:39 AM 


Please respond to
users@httpd.apache.org


To

<us...@httpd.apache.org> 


cc

 


Subject

[users@httpd] Apache, LDAP AUTH and directory access

Re: [users@httpd] Apache, LDAP AUTH and directory access

Posted by Sa...@seagate.com.

Hello,

You might have to create containers for each user. e.g.: (Notice "require 
saqib" instead of "require valid-user" 

<Directory /ftp/private/gael>
    Options MultiViews Indexes
    AuthType Basic
    AuthName "Private Zone"
    AuthLDAPUrl ldap://127.0.0.1:389/ou=users,ou=ftp,dc=test?uid?sub?
    AuthLDAPBindDN uid=avaliduidtologin,dc=test
    AuthLDAPBindPassword secret
    require gael
    <Limit GET POST>
            Order Deny,Allow
            Allow from All
    </Limit>
</Directory>

<Directory /ftp/private/saqib>
    Options MultiViews Indexes
    AuthType Basic
    AuthName "Private Zone"
    AuthLDAPUrl ldap://127.0.0.1:389/ou=users,ou=ftp,dc=test?uid?sub?
    AuthLDAPBindDN uid=avaliduidtologin,dc=test
    AuthLDAPBindPassword secret
    require saqib
    <Limit GET POST>
            Order Deny,Allow
            Allow from All
    </Limit>
</Directory>
... etc

Covalent < http://www.covalent.com >  provides mod_ftp < 
http://www.covalent.net/webinar/mod_ftp-Webinar.ppt > which does exactly 
what you are trying to do. And they make administration extremely easy 
through the use of a GUI. Take a look at that as well.

Thanks.
Saqib Ali
http://www.xml-dev.com/blog/



"Gael Mauleon" <ad...@premiere-heure.fr> 
No Phone Info Available
07/11/2005 05:39 AM
Please respond to
users@httpd.apache.org


To
<us...@httpd.apache.org>
cc

Subject
[users@httpd] Apache, LDAP AUTH and directory access






Subject: LDAP Auth and Users Directory
From: Gael Mauleon <sp...@yahoo.fr>
Newsgroups: comp.infosystems.www.servers.unix
 
Hi,
 
I have a few problems with the way I can use the LDAP auhtentification.
 
I want my users to view their directory with a basic authentification via 
LDAP, and I don't want to modify my config file with every users I add.
 
Here is what I used for the test ->
 
 
UserDir /ftp/private
<Directory /ftp/private/*>
    Options MultiViews Indexes
    AuthType Basic
    AuthName "Private Zone"
    AuthLDAPUrl ldap://127.0.0.1:389/ou=users,ou=ftp,dc=test?uid?sub?
    AuthLDAPBindDN uid=avaliduidtologin,dc=test
    AuthLDAPBindPassword secret
    require valid-user
    <Limit GET POST>
            Order Deny,Allow
            Allow from All
    </Limit>
</Directory>
 
 
This is working quite well but unfortunatly with that, everyone can 
authenticate into every directory, (bob can view with his login/pass the 
directory of john).
 
So my question is : 
 
Can I use some variable (contening requested directory for exemple) as a 
filter to my ldap search or in the Allow directive so a user can log only 
to his directory ??
 
Or perhaps (apart the .htaccess file), another solution exists ?
 
 
Thanks in advance.
Gael.