API tools faq
paste
xedlock

Apache 2.2 + LDAP + htpasswd + AUTHENTICATE_MEMBEROF

xedlock
Jul 10th, 2013
770
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Properties 1.36 KB | None | 0 0
raw download clone embed print report
  1. ##
  2. ## Apache configuration for LDAP authentication against Active Directory
  3. ## and against a local .htpasswd file, via SSL. Also pulls in all memberOf
  4. ## attributes and shoves them in the environment under AUTHENTICATE_MEMBEROF
  5. ## for applications to use later, if necessary
  6. ##
  7.  
  8. LDAPSharedCacheSize 500000
  9. LDAPCacheEntries 2048
  10. LDAPCacheTTL 600
  11. LDAPOpCacheEntries 2048
  12. LDAPOpCacheTTL 600
  13.  
  14. <VirtualHost _default_:443>
  15.  
  16.     SSLEngine On
  17.  
  18.     <FilesMatch '^\.[Dd][Ss]_[Ss]'>
  19.         Order allow,deny
  20.         Deny from all
  21.     </FilesMatch>
  22.  
  23.     <FilesMatch '\.[Dd][Bb]'>
  24.         Order allow,deny
  25.         Deny from all
  26.     </FilesMatch>
  27.  
  28.     <Location /repos>
  29.         <Limit>
  30.             AuthType Basic
  31.             AuthName svn.innotrac.com
  32.             AuthBasicProvider file ldap
  33.             AuthzLDAPAuthoritative off
  34.             AuthUserFile /nfs/subversion/.htpasswd
  35.  
  36.             AuthLDAPGroupAttributeIsDN on
  37.             AuthLDAPRemoteUserAttribute sAMAccountName
  38.             AuthLDAPGroupAttribute member
  39.  
  40.             AuthLDAPBindDN BIND_DN
  41.             AuthLDAPBindPassword BIND_PW
  42.             AuthLDAPUrl "ldap://servername.server.com:3268/dc=company,dc=com?sAMAccountName,memberOf?sub?(|(objectClass=person)(objectClass=user))(!(userAccountControl:1.2.840.113556.1.4.803:=2))" NONE
  43.  
  44.             # for .htpasswd
  45.             require valid-user
  46.  
  47.             # for LDAP
  48.             Require ldap-group CN=subversion,OU=groups,OU=unix,DC=company,DC=com
  49.         </Limit>
  50.     </Location>
  51. <VirtualHost>
Advertisement
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!