Saturday, February 11, 2017

Apache webserver and Ldap connection


    ServerAdmin webmaster@dummy-host.example.com
    DocumentRoot /var/www/html/app
    ServerName application.com
    ErrorLog logs/app-error_log
    CustomLog logs/app-access_log common
   
    AuthBasicProvider ldap
    AuthType Basic
    AuthName "LDAP Authentication"
    AuthzLDAPAuthoritative off
    AuthLDAPURL "ldap://ldap:389/dc=doamin,dc=com?uid?sub"
    AuthLDAPBindDN "uid=name,ou=domain,ddc=com"
    Require valid-user
    AuthLDAPRemoteUserAttribute uid
   
ProxyPass /uri http://app:port/uri
ProxyPassReverse /uri http://app:port/uri


For group permission:-


            Options Indexes FollowSymLinks
            AllowOverride None
            Order deny,allow
            AuthName "company Intranet"
            AuthType Basic
            AuthBasicProvider ldap
            AuthLDAPUrl ldaps://ldap:port/ou=People,dc=company,dc=com?uid
            AuthLDAPGroupAttribute "uniquemember"
            AuthLDAPGroupAttributeIsDN on
            Require ldap-group cn=groupname,ou=aliases,ou=Group,dc=company,dc=com

       

at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)

curl and cacert

curl -v --cacert cacert.pem https://www.example/cgi-bin/f ile.xgi -I -X POST

  • Linking Script with Rc.5
    Here i have created a script for starting and stopping tomcat service named it as ts and placed it on /etc/init.d  in order to make this scr...
  • Run Apache on 80 with nonroot user
    Command to Run setcap 'cap_net_bind_service=+ep' /opt/apache/bin/httpd httpd is the custom script i made to run apache.
  • Comparing SSL KEY/CSR/CRT
     Comparing openssl key/csr/crt is useful to make sure signature between key/csr/crt are same openssl x509 -noout -modulus -in certificat...