Authorisation using LDAP

------_=_NextPart_001_01CA4C25.16A4DAA8
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

=20

=20

Hi there,

I'm wanting to configure apache to provide authorisation using LDAP, my
users already authenticate via another method so I only want to
authorize access if the user belongs to a particular group or role. And
I want to apply this access to both static content in my DocumentRoot
and also to allow the users to then be proxied onwards. Does anyone have
any examples of configuration for providing authorisation only, all
examples I have found related to authentication and then authorization
and I can't get it to work.

=20

Cheers in advance

=20

Steve


Capgemini is a trading name used by the Capgemini Group of companies =
which includes Capgemini UK plc, a company registered in England and =
Wales (number 943935) whose registered office is at No. 1 Forge End, =
Woking, Surrey, GU21 6DB.
This message contains information that may be privileged or confidential =
and is the property of the Capgemini Group. It is intended only for the =
person to whom it is addressed. If you are not the intended recipient, =
you are not authorized to read, print, retain, copy, disseminate, =
distribute, or use this message or any part thereof. If you receive this =
message in error, please notify the sender immediately and delete all =
copies of this message.

------_=_NextPart_001_01CA4C25.16A4DAA8
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">


charset=3Dus-ascii">

Capgemini is a trading name used by =
the Capgemini Group of companies which includes Capgemini UK plc, a =
company registered in England and Wales (number 943935) whose registered =
office is at No. 1 Forge End, Woking, Surrey, GU21 =
6DB.

This message contains =
information that may be privileged or confidential and is the property =
of the Capgemini Group. It is intended only for the person to whom it is =
addressed. If you are not the intended recipient, you are not authorized =
to read, print, retain, copy, disseminate, distribute, or use this =
message or any part thereof. If you receive this message in error, =
please notify the sender immediately and delete all copies of this =
message.

Re: Authorisation using LDAP

Hi Stephen,

What you describe can be handled by
http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html

and a combination of Location tags if you want your authentication to
be fine grained.


On Wed, Oct 14, 2009 at 3:49 AM, Foster, Stephen (ASPIRE)
wrote:
>
>
>
>
> Hi there,
>
> I=92m wanting to configure apache to provide authorisation using LDAP, my
> users already authenticate via another method so I only want to authorize
> access if the user belongs to a particular group or role. And I want to
> apply this access to both static content in my DocumentRoot and also to
> allow the users to then be proxied onwards. Does anyone have any examples=
of
> configuration for providing authorisation only, all examples I have found
> related to authentication and then authorization and I can=92t get it to =
work.
>
>
>
> Cheers in advance
>
>
>
> Steve
>
> Capgemini is a trading name used by the Capgemini Group of companies whic=
h
> includes Capgemini UK plc, a company registered in England and Wales (num=
ber
> 943935) whose registered office is at No. 1 Forge End, Woking, Surrey, GU=
21
> 6DB.
>
> This message contains information that may be privileged or confidential =
and
> is the property of the Capgemini Group. It is intended only for the perso=
n
> to whom it is addressed. If you are not the intended recipient, you are n=
ot
> authorized to read, print, retain, copy, disseminate, distribute, or use
> this message or any part thereof. If you receive this message in error,
> please notify the sender immediately and delete all copies of this messag=
e.



--=20
"The secret impresses no-one, the trick you use it for is everything"
- Alfred Borden (The Prestiege)

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org