anz
Apprentice
Joined: 05 Feb 2003
Posts: 279
Location: Vienna
|
 Posted: Thu Apr 13, 2006 8:50 am Post subject: Apache LDAP referrals |
 |
|
Hello,
we 've worked around with apache (2.0.55-r1), LDAP (ITDS Ver. 6.0) and referrals.
We tried the muquit modules and ran in troubles (f.e. does not unbind, filter searching did not work).
But the solution seems to be very simple:
the apache mod_auth modules CAN use referral, you just have to put a
"--enable-referrals" flag.
So I added following two last lines to the ebuild (apache-2.0.55-r1.ebuild):
| Quote: | else
myconf="${myconf}
--with-suexec-safepath="/usr/local/bin:/usr/bin:/bin" \
--with-suexec-logfile=/var/log/apache2/suexec_log \
--with-suexec-bin=/usr/sbin/suexec2 \
--with-suexec-userdir=${USERDIR} \
--with-suexec-caller=apache \
--with-suexec-docroot=/var/www \
--with-suexec-uidmin=1000 \
--with-suexec-gidmin=100 \
--with-suexec-umask=077 \
--enable-suexec=shared
--enable-auth-ldap=shared
--enable-referrals=shared" |
(about line 140 in the ebuild file),
did a
| Code: | | ebuild /usr/portage/net-www/apache/apache-2.0.55-r1.ebuild digest |
and emerged apache:
| Quote: | | USE="ldap" emerge apache |
(If you have installed apache before, unmerging would be a good option. But save your conf-files before unmerging - I 've forgotten it ...  )
Sorry - this is very nasty, but I have never written an ebuild ...
After that you have to modify the /etc/conf.d/apache2:
| Quote: | | APACHE2_OPTS="-D DEFAULT_VHOST -D LDAP -D AUTH_LDAP" |
To use .htaccess files, you have to change in /etc/apache2/vhosts.d/00_default_vhost.conf
AllowOverride None
to
AllowOverride All
(thanks to Joseph_sys for the tip!)
A usefull link:
How to use the auth in .htaccess: http://www.rudedog.org/auth_ldap/1.6/auth_ldap.html
---------------------------------------------------------------------
Here is the emerge -pv apache output after installing:
[ebuild R ] net-www/apache-2.0.55-r1 -apache2 -debug -doc +ldap -mpm-leader -mpm-peruser -mpm-prefork -mpm-threadpool -mpm-worker -no-suexec (-selinux) +ssl -static-modules -threads 0 kB
Stupid question: if apache installation with USE="apache2 ldap" is choosen, will be the muquit-LDAP-auth modules installed?
I hope, this also may work on your system ...
_________________
Greetings from Vienna |
|
Networking & Security
