[users@httpd] authentication against active directory.

[Ramesh <cf...@yahoo.com>]

Hi,

I have a web site which I would want to allow only users after authenticating them against our Active Directory. I wanted to place .htaccess file in the main web folder

1. Do I need to install "mod_authz_ldap" module ? And is there any other module which I would need to install ?

2. Also what should I mention in .htaccess file to ask it to authenticate users against my Active Directory ?

Thank you.





      

Re: [users@httpd] authentication against active directory.

[Simon Walter <si...@hokkaidotracks.com>]

Ramesh wrote:
> Hi,
>
> I have a web site which I would want to allow only users after 
> authenticating them against our Active Directory. I wanted to place 
> .htaccess file in the main web folder
>
> 1. Do I need to install "mod_authz_ldap" module ? And is there any 
> other module which I would need to install ?
>
> 2. Also what should I mention in .htaccess file to ask it to 
> authenticate users against my Active Directory ?
>
> Thank you.
>
>
>
Hi Ramesh,

You need to configure Apache to authenticate against your AD and this 
has nothing to do with an .htaccess file. Yes, you need mod_authnz_ldap 
and also mod_ldap. There are quite a few HOWTO type documents for doing 
this on the web and describe this process fairly well. What I'd like to 
do is authenticate over an encrypted TCP/IP session like SSL. I haven't 
managed to get that working yet. Here the relative section of my Apache 
vhost conf for non-SSL auth with AD:

...
        <Location /projects>
...
                Order deny,allow
                Deny from all
                Allow from all
                AuthType Basic
                AuthName "***"
                AuthBasicProvider "ldap"
                AuthLDAPURL 
"ldap://***:3268/DC=***,DC=***?sAMAccountName?sub?(objectClass=user)"
                AuthLDAPBindDN "***@***.***"
                AuthLDAPBindPassword "***"
                AuthzLDAPAuthoritative Off
                require valid-user
        </Location>
...