DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=35805>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=35805

           Summary: New require attribute for mod_auth_ldap
           Product: Apache httpd-2.0
           Version: 2.0.53
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: mod_auth_ldap
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I thought something was missing in mod_auth_ldap to authenticate users based
fully on ldap without having to wrote a directory context for each user.

It's based on the require statement :

require directory-attribute <name-of-attribute>

The value of this attribute will be compare to the directory that is requested,
so we can have something like this :

Alias /private /home/www/private
<Directory /home/www/private>
    Options MultiViews Indexes

    AuthAuthoritative Off
    AuthType Basic
    AuthName "Private Zone"
    AuthLDAPUrl ldap://127.0.0.1:389/ou=goodou,dc=com?uid?sub?
    AuthLDAPBindDN uid=gooduid,dc=com
    AuthLDAPBindPassword secret
    require directory-attribute homeDirectory

    <Limit GET>
            Order Deny,Allow
            Allow from All
    </Limit>
</Directory>


And have private access per directory and per users without changing the
httpd.conf, everything we need is in the ldap tree.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to