Active Directory authentication in httpd.conf - Revision history

George2 at 13:18, 21 March 2016

2016-03-21T13:18:49Z

George2 at 13:16, 21 March 2016

2016-03-21T13:16:23Z

George2 at 13:15, 21 March 2016

2016-03-21T13:15:47Z

George2 at 13:15, 21 March 2016

2016-03-21T13:15:16Z

George2 at 13:11, 21 March 2016

2016-03-21T13:11:51Z

George2 at 13:09, 21 March 2016

2016-03-21T13:09:13Z

George2: Created page with "Reference - http://www.held-im-ruhestand.de/software/apache-ldap-active-directory-authentication.html
"

2016-03-21T13:08:09Z

Created page with "Reference - http://www.held-im-ruhestand.de/software/apache-ldap-active-directory-authentication.html<br>"

New page

Reference - http://www.held-im-ruhestand.de/software/apache-ldap-active-directory-authentication.html<br>

@@ Line 27: / Line 27: @@
 Specific Users, Groups
 # specific user
-#   Require ldap-user "john.doe"
+#   Require ldap-user "john.doe"             ( this worked for me )
 # specific user by DN
-#   Require ldap-dn CN=John Doe,OU=Finance,OU=Germany,DC=example,DC=com
+#   Require ldap-dn CN=John Doe,OU=Finance,OU=Germany,DC=example,DC=com      ( this didnt work for me )
 # member of group
-#   Require ldap-group CN=Finance Department,OU=Finance,OU=Germany,DC=example,DC=com
+#   Require ldap-group CN=Finance Department,OU=Finance,OU=Germany,DC=example,DC=com     ( I didn't try this )
 </source>

← Older revision		Revision as of 13:16, 21 March 2016
Line 3:		Line 3:
	<source lang="text">		<source lang="text">

−	~~httpd.conf~~
−	~~Let’s start with an example~~

	<Location /protected> ( I used Directory with full file system path )		<Location /protected> ( I used Directory with full file system path )

← Older revision		Revision as of 13:15, 21 March 2016
Line 23:		Line 23:

	AuthLDAPURL "ldap://IP-DOMAIN-CONTROLLER/ou=Germany,dc=example,dc=com?Vmail?sub?(objectClass=*)"		AuthLDAPURL "ldap://IP-DOMAIN-CONTROLLER/ou=Germany,dc=example,dc=com?Vmail?sub?(objectClass=*)"
−	~~AuthType, AuthName should be known.~~	+

@@ Line 8: / Line 8: @@
 <Location /protected>          ( I used Directory with full file system path )
 # Using this to bind
-AuthLDAPBindDN "CN=John Doe,OU=IT Department,OU=Germany,DC=example,DC=com"
+AuthLDAPBindDN "CN=John Doe,OU=IT Department,OU=Germany,DC=example,DC=com" ( I used blah009@camping.com)
 AuthLDAPBindPassword "XXX"
 # search user
@@ Line 17: / Line 17: @@
 AuthBasicProvider ldap
 # Important, otherwise "(9)Bad file descriptor: Could not open password file: (null)"
-AuthUserFile /dev/null
+AuthUserFile /dev/null         <------------ this is needed
 require valid-user
 </Location>
 AuthLDAPURL "ldap://IP-DOMAIN-CONTROLLER/ou=Germany,dc=example,dc=com?Vmail?sub?(objectClass=*)"
 AuthType, AuthName should be known.
-Important is the AuthUserFile directive.
 Specific Users, Groups

@@ Line 6: / Line 6: @@
 Let’s start with an example
-<Location /protected>
+<Location /protected>          ( I used Directory with full file system path )
 # Using this to bind
 AuthLDAPBindDN "CN=John Doe,OU=IT Department,OU=Germany,DC=example,DC=com"

← Older revision		Revision as of 13:09, 21 March 2016
Line 1:		Line 1:
	Reference - http://www.held-im-ruhestand.de/software/apache-ldap-active-directory-authentication.html<br>		Reference - http://www.held-im-ruhestand.de/software/apache-ldap-active-directory-authentication.html<br>
		+
		+	<source lang="text">
		+
		+	httpd.conf
		+	Let’s start with an example
		+
		+	<Location /protected>
		+	# Using this to bind
		+	AuthLDAPBindDN "CN=John Doe,OU=IT Department,OU=Germany,DC=example,DC=com"
		+	AuthLDAPBindPassword "XXX"
		+	# search user
		+	AuthLDAPURL "ldap://IP-DOMAIN-CONTROLLER/ou=Germany,dc=example,dc=com?sAMAccountName?sub?(objectClass=*)"
		+
		+	AuthType Basic
		+	AuthName "USE YOUR WINDOWS ACCOUNT"
		+	AuthBasicProvider ldap
		+	# Important, otherwise "(9)Bad file descriptor: Could not open password file: (null)"
		+	AuthUserFile /dev/null
		+	require valid-user
		+	</Location>
		+	AuthLDAPBindDN and AuthLDAPBindPassword are uesd for the first step, Accessing the active directory.
		+
		+	Next we need to find the users, this is AuthLDAPURL. It looks like AD won’t allow to search the complete Tree (dc=example,dc=com). I always needed to specify at least one organizational unit (ou). We search the whole subtree (sub) not just one folder. When searching the tree we compare sAMAccountName with the username supplied to us. You could also the eMail Addresses.
		+
		+	AuthLDAPURL "ldap://IP-DOMAIN-CONTROLLER/ou=Germany,dc=example,dc=com?Vmail?sub?(objectClass=*)"
		+	AuthType, AuthName should be known.
		+
		+	Important is the AuthUserFile directive.
		+
		+	Specific Users, Groups
		+	# specific user
		+	# Require ldap-user "john.doe"
		+	# specific user by DN
		+	# Require ldap-dn CN=John Doe,OU=Finance,OU=Germany,DC=example,DC=com
		+	# member of group
		+	# Require ldap-group CN=Finance Department,OU=Finance,OU=Germany,DC=example,DC=com
		+
		+	</source>

Active Directory authentication in httpd.conf - Revision history

George2 at 13:18, 21 March 2016

George2 at 13:16, 21 March 2016

George2 at 13:15, 21 March 2016

George2 at 13:15, 21 March 2016

George2 at 13:11, 21 March 2016

George2 at 13:09, 21 March 2016

George2: Created page with "Reference - http://www.held-im-ruhestand.de/software/apache-ldap-active-directory-authentication.html"

George2: Created page with "Reference - http://www.held-im-ruhestand.de/software/apache-ldap-active-directory-authentication.html
"