How to Use NDS eDirectory to Secure Apache Web ... - CGISecurity

More documents

Recommendations

Info

The following 'require' directives are supported:require user Defines a list of valid users.require valid-userAllows access for any valid user name and password.require context Allows access for any valid user name and password with a matching context.require context Allows access for any valid user name and password with a partial matching context.Auth_LDAPThe AUTH_LDAP module is an authentication module that can beused to authenticate users against any LDAP compliant directoryservice. This is an open source module and is freely distributed underthe Apache Public License. The NetWare version of this modulecontains no significant changes from any other platformimplementation. It supports SSL connections to the LDAP serverprovided that both the NetWare server and the LDAP server havebeen configured correctly for SSL. The following is a listing of thedirectives that are supported by AUTH_LDAP. For a completedescription, refer to the documentation that accompanies the module.AuthLDAPBindDNSyntaxContextDescriptionAuthLDAPBindDN directory, .htaccessAn optional DN used to bind to the server when searchingfor entries. If not provided, AUTH_LDAP will use ananonymous bind.AuthLDAPBindPasswordSyntaxContextDescriptionAuthLDAPBindPassword directory, .htaccessA bind password to use in conjunction with the bind DN.AuthLDAPAuthoritativeSyntaxContextDescriptionAuthLDAPAuthoritative directory, .htaccessSet to 'OFF' if this module should let other authenticationmodules attempt to authenticate the user, shouldauthentication with this module fail.30www.novell.com/appnotes
AuthLDAPURLSyntaxContextDescriptionAuthLDAPURL directory, .htaccessA URL which specifies the LDAP search parameters touse.AuthLDAPRemoteUserIsDNSyntaxContextDescriptionAuthLDAPRemoteUserIsDN < Off (Default) | On>directory, .htaccessIf this directive is set to 'ON', the value of theREMOTE_USER environment variable will be set to thefull distinguished name of the authenticated user,rather than just the username that was passed by theclientAuthLDAPCertDBPathSyntaxContextDescriptionAuthLDAPCertDBPath server configSpecifies in which directory AUTH_LDAP should look forthe certificate authorities database. There should be afile named cert7.db in that directory.AuthLDAPCacheSizeSyntaxContextDescriptionAuthLDAPCacheSize server configSpecifies the maximum size of the LDAP search cache.AuthLDAPCacheTTLSyntaxContextDescriptionAuthLDAPCacheTTL server configSpecifies the time (in seconds) that an item in thesearch cache remains valid.AuthLDAPOpCacheSizeSyntaxContextDescriptionAuthLDAPOpCacheSize server configSpecifies the size of the cache AUTH_LDAP uses tocache LDAP operations.F e b r u a r y 2 0 0 131
Page 2: IntroductionThe Apache Web Server i
Page 5: Request(wait)Post-read-requestURL t
Page 8 and 9: SecureListenSyntaxContextDescriptio
Page 13 and 14: At this point the modules will be l

How to Use NDS eDirectory to Secure Apache Web ... - CGISecurity

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?