How to Use NDS eDirectory to Secure Apache Web ... - CGISecurity

More documents

Recommendations

Info

SecureListenSyntaxContextDescriptionSecureListen server configInstructs Apache to listen to the specified port on asecure connection.Mod_NDSMOD_NDS is an Apache module that was derived from animplementation for Linux that is based on the NCPFS API. Themodule was originally developed by Philip R. Wilson and is publiclyavailable under the GNU General Public License. The NetWareimplementation of MOD_NDS simply replaces the calls to NCPFSwith direct calls to the NetWare DSAPI. By doing so, MOD_NDS isalso able to force Apache to respect the file rights that aremanipulated through Novell NDS eDirectory and enforced by the filesystem. This level of file access could not be achieved by the Linuxversion of MOD_NDS. The following is a description of thedirectives that allow an administrator to integrate the NetWareDirectory Services authentication and authorization with the ApacheWeb Server. For a complete description of the directives, refer to thedocumentation that accompanies MOD_NDS.AuthNDSUserFileSyntaxContextDescriptionAuthNDSUserFile directory, .htaccessSets the name of a text file containing a list of usernamesthat are allowed to authenticate (obsolete onNetWare).AuthNDSAuthoritativeSyntaxContextDescriptionAuthNDSAuthoritative directory, .htaccessDetermines whether the request is allowed to be passedon to lower level modules for further authentication.AuthNDSTreeSyntaxContextDescriptionAuthNDSAuthoritative directory, .htaccessSets the NDS tree that will be used for user authentication.This is a mandatory directive.28www.novell.com/appnotes
AuthNDSRequirePWSyntaxContextDescriptionAuthNDSRequirePW directory, .htaccessDetermines if a user name with an empty password willbe allowed to access the site.AuthNDSExpiredURISyntaxContextDescriptionAuthNDSExpiredURIdirectory, .htaccessProvides redirection to an alternate page if an expiredpassword is detected.AuthNDSCacheTimeoutSyntaxAuthNDSCacheTimeout Default AuthNDSCacheTimeout 300ContextDescriptionserver configSets the time-to-live value for entries in the cache (inseconds), or disables the cache entirely (by setting it tozero).AuthNDSUniqueCNsSyntax AuthNDSUniqueCNs ContextDescriptionserver configEnables the caching of name->FDN mappings, whichprevents the module from having to search for the user'sFDN on every request.AuthNDSContextSyntaxContextDescriptionAuthNDSContext directory, .htaccessSets a search list of contexts for contextless logins.AuthNDSContextOverrideSyntaxContextDescriptionAuthNDSContextOverride directory, .htaccessThis directive only applies to AuthNDSContext. If set to'ON' for a given directory, it causes all search contextsdefined in higher-level directories to be ignored.F e b r u a r y 2 0 0 129
Page 2: IntroductionThe Apache Web Server i
Page 5: Request(wait)Post-read-requestURL t
Page 10 and 11: The following 'require' directives
Page 13 and 14: At this point the modules will be l

How to Use NDS eDirectory to Secure Apache Web ... - CGISecurity

Create successful ePaper yourself

Delete template?

Save as template?