NAME

Apache2::AuthZLDAP - Authorization module based on LDAP filters or LDAP groups

VERSION

Version 0.01

SYNOPSIS

This module is an authorization handler for Apache 2. Its authorization method relies on openLDAP filters.

CONFIGURATION

This module can work with all authentification module that provides a valid REMOTE_USER env var. For example :

• basic auth

• CAS authentication (mod_cas)

Example with CAS authentication :

   <VirtualHost 192.168.0.1:80>
   ## this vars can be initialized out of directory 
   PerlSetVar LDAPhost            myldaphost
   PerlSetVar LDAPbaseDN          ou=groups,dc=organization,dc=domain


   <Directory "/var/www/somewhere">
   AuthName CAS
   AuthType CAS
   ## define a filter. [uid] will be replaced by user value on runtime 
   PerlSetVar LDAPfilter        &(member=uid=[uid],ou=people,dc=organization,dc=domain)(cn=admins)
   ## charging of the module for authZ
   PerlAuthzHandler Apache2::AuthZLDAP
   require valid-user
   </Directory>

   </VirtualHost>

Other configuration directives (optional) :

• PerlSetVar LDAPTLS (yes|no) ## is the session TLS ? default no

• PerlSetVar LDAPCAfile <path> ## see start_tls cafile option in Net::LDAP

• PerlSetVar TLSverify (none|optional|require) ## see start_tls verify option in Net::LDAP

• PerlSetVar LDAPuser myuser # if user/paswword required to bind

• PerlSetVar LDAPpassword mypasswd # id.

• PerlSetVar LDAPscope (base|one|sub) # default sub

AUTHOR

Dominique Launay, <dominique.launay AT cru.fr>

BUGS

Please report any bugs or feature requests through the web interface at https://sourcesup.cru.fr/tracker/?func=add&group_id=354&atid=1506 I will be notified, and then you'll automatically be notified of progress on your bug as I make changes.

SUPPORT

You can find documentation for this module with the perldoc command.

perldoc Apache2::AuthZLDAP

ACKNOWLEDGEMENTS

COPYRIGHT & LICENSE

Copyright 2007 Dominique Launay, all rights reserved.

This program is released under the following license: GPL