Re: OT ? : Active Directory Authentication with Perl, Mod_Perl and Apache

[eric256]

I use the following HTTP conf to restrict access to my Trac SVN repo

<Location /svn>
   DAV svn
   SVNParentPath /projects/svn

   Order allow,deny
   Allow from all

   AuthType Basic
   AuthName "Trac"
   AuthBasicProvider "ldap"
   AuthLDAPURL "ldap://domain.com:389/DC=domain,DC=com?sAMAccountName?
+sub?(objectClass=*)"
   AuthLDAPBindDN   "[e-mail]"
   AuthLDAPBindPassword "password"
   authzldapauthoritative Off
   require ldap-group CN=Trac,CN=Users,DC=domain,DC=com
</Location>

I don't think you need perl at all for this aspect. I do also have a perl script that uses LDAP for authentication but its not to protect a website.

[Anonymous Monk]

Hi, this is interesting, thanks. Do I need to have mod_perl or apache configured in a special way? Does Apache support LDAP "out of the box"? Thanks again

[almut]

Using Google, getting answers to such questions often is a matter of seconds. The reply by eric256 contained several suitable keywords to craft a search, e.g. http://www.google.com/search?q=authzldapauthoritative (choose a word that looks sufficiently specific to the issue...). The first hit is a link to the Apache auth module mod_authnz_ldap on the httpd.apache.org site, which has lots of other info around configuring Apache.