How to Use NDS eDirectory to Secure Apache Web ... - CGISecurity

More documents

Recommendations

Info

Apache Web Server ModulesOne of the strong points of Apache is the ability to extend the Webserver through modules. In fact, most of the functionality that existsin the Apache Web server is provided by the inclusion of modules.There are two types of Apache modules: external and internal (orbuilt-in). An external module is a set of functionality that is wrappedup into a separate executable file. Having the module as a separatefile allows the administrator to add, replace, or remove the module asneeded. If a newer version of the module becomes available, theadministrator simply has to copy the new executable file into the/APACHE/MODULES directory and restart the server.The second type of module is an internal (or built-in) module. Theseare modules or sets of functionality that have been compiled into theApache executable itself when it was built from source. From asource code perspective, there is really no difference between anexternal or built-in module. The source code for the module looks thesame, and the framework for implementing it does not differ. In fact,an external module can be compiled directly into the Apacheexecutable by simply including the source as part of the core Apachecode.When a request is received by the Apache Web Server, it must passthrough a series of stages in order for it to be completely handled. Thearchitecture of Apache allows a module to insert itself into any one ormore of these stages (see Figure 1).24www.novell.com/appnotes
Request(wait)Post-read-requestURL translationHeader parsingCleanupAccess controlAuthenticationLoggingAuthorizationMIME type checkingFixupsResponseFigure 1: Apache Web Server stages.Three of these stages deal with web server security: Access Control,Authentication, and Authorization. There are currently variousApache modules available that supply handlers for one or more ofthese stages in order to give the Apache Web Server a certain level ofsecurity.The following sections briefly describe the default level of securitythat is provided by the standard modules that ship with the ApacheWeb Server. They will also discuss three additional modules thatallow Apache to take advantage of the security provided by theoperating system.F e b r u a r y 2 0 0 125
Page 2: IntroductionThe Apache Web Server i
Page 8 and 9: SecureListenSyntaxContextDescriptio
Page 10 and 11: The following 'require' directives
Page 13 and 14: At this point the modules will be l

How to Use NDS eDirectory to Secure Apache Web ... - CGISecurity

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?