I am trying to port a configuration from Apache 2.2 to Apache 2.4 that is used
for LDAP authentication, but I have little knowledge of LDAP. I can translate
“Order deny,allow” and “Deny from All” I have found that
“AuthzLDAPAuthoritative off” has been removed from Apache 2.4. I am getting a
syntax error on the AuthLDAPUrl line. From one of the examples I found, do I
need to change from a Directory block to a Location block?
Here is what the stanza is in Apache 2.2
<Directory "/usr/local/www/docs/it/snaps">
Options -Indexes +FollowSymLinks +ExecCGI +Includes
Order deny,allow
Deny from All
AuthName "Enter Your Netid and Password"
AuthType basic
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPBindDN "cn=sanitycheck, ou=Service, dc=example, dc=com"
AuthLDAPBindPassword "tmd+pkx"
AuthLDAPUrl
"ldaps://evregistryprda.cyber.example.com.cyber.example.com:1636
ldaps://chregistryprda.cyber.example.com.cyber.example.com:1636
ldaps://evregistryprdb.cyber.example.com.cyber.example.com:1636
ldaps://chregistryprdb.cyber.example.com.cyber.example.com:1636/dc=example,dc=com?uid?sub?(objectclass=*)"
Require valid-user
Satisfy any
</Directory>
Darryl Baker, GSEC (he/him/his)
Sr. System Administrator
Distributed Application Platform Services
Northwestern University
1800 Sherman Ave.
Suite 6-600 – Box #39
Evanston, IL 60201-3715
[email protected]<mailto:[email protected]>
(847) 467-6674