Giter VIP home page Giter VIP logo

apache2_ldap_ad_multiple_group_multiple_server's Introduction

Apache2 with multiple ldap server and multiple groups


 Setting:
   +----------------------+ 
   |                      | AD-Controller ldap-1
   | User: al1, gh7       |
   |                      |
   +----------------------+
      #
      # trust
      #
   +-----------------------------------+ 
   |                                   | Ad-Controller ldap-ad1
   | User: WK789, ZU567                |
   |                                   |
   | Group Bibl: WK789, ZU567, al1     |
   | Group EDV : ZU567, gh7,   al1     |     
   |                                   |
   +-----------------------------------+




# Login Provider
<AuthnProviderAlias ldap ldap-1>
        AuthLDAPBindDN "myadlogin"
        AuthLDAPBindPassword s3cr3t
        AuthLDAPURL "ldap://ad.mycompany.test/OU=user,DC=ad,DC=mycompany,DC=test?sAMAccountName"
</AuthnProviderAlias>

<AuthnProviderAlias ldap ldap-ad1>
        AuthLDAPBindDN "[email protected]"
        AuthLDAPBindPassword super_secret
        AuthLDAPURL "ldap://ads3.sub.mycompany.test/OU=Benutzer,DC=sub,DC=mycompany,DC=test?sAMAccountName"
</AuthnProviderAlias>

# Group Provider
<AuthzProviderAlias ldap-group ldap-group-bibl "CN=Bibl,OU=Gruppen,DC=sub,DC=mycompany,DC=test">
        AuthLDAPBindDN "[email protected]"
        AuthLDAPBindPassword super_secret
        AuthLDAPURL "ldap://ads3.sub.mycompany.test/OU=Benutzer,DC=sub,DC=mycompany,DC=test?sAMAccountName"
        AuthLDAPGroupAttribute member
        AuthLDAPGroupAttributeIsDN on
        AuthLDAPMaxSubGroupDepth 0
</AuthzProviderAlias>

<AuthzProviderAlias ldap-group ldap-group-edv "CN=EDV,OU=Gruppen,DC=sub,DC=mycompany,DC=test">
        AuthLDAPBindDN "[email protected]"
        AuthLDAPBindPassword super_secret
        AuthLDAPURL "ldap://ads3.sub.mycompany.test/OU=Benutzer,DC=sub,DC=mycompany,DC=test?sAMAccountName"
        AuthLDAPGroupAttribute member
        AuthLDAPGroupAttributeIsDN on
        AuthLDAPMaxSubGroupDepth 0
</AuthzProviderAlias>


listen 0.0.0.0:8080
<VirtualHost 0.0.0.0:8080>
    ServerAdmin root
    ServerName your_servername
   
    LogLevel   error
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    CustomLog ${APACHE_LOG_DIR}/access_8080.log combined
    ErrorLog  ${APACHE_LOG_DIR}/error_8080.log


    DocumentRoot /var/www/html

    <Directory /var/www/html >
        Options FollowSymLinks  Indexes
        AllowOverride None

 	AuthName "Login Kennung"
	AuthType Basic
	AuthBasicProvider ldap-ad1 ldap-1	
	<RequireAny>
		Require ldap-group-edv
		Require ldap-group-bibl
	</RequireAny>
	<RequireAll>
		Require valid-user
		Require ip 147.142.106. 127.0.0.1
	</RequireAll>
		
    </Directory>

</virtualhost>

apache2_ldap_ad_multiple_group_multiple_server's People

Contributors

bohnelang avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.