NAME

Apache::AuthenLDAP - mod_perl LDAP Authentication Module

SYNOPSIS

<Directory /foo/bar>
# Authentication Realm and Type (only Basic supported)
AuthName "Foo Bar Authentication"
AuthType Basic

# Any of the following variables can be set.
# Defaults are listed to the right.
PerlSetVar AuthenBaseDN o=Foo,c=Bar  # Default: Empty String ("")
PerlSetVar LDAPServer   ldap.foo.com # Default: localhost
PerlSetVar LDAPPort     389          # Default: 389 (standard LDAP port)
PerlSetVar UidattrType  userid       # Default: uid

PerlAuthenHandler Apache::AuthenLDAP

require valid-user                   # Any Valid LDAP User
                                     # Matching Attribute and Value
</Directory>

DESCRIPTION

Apache::AuthenLDAP is designed to work with mod_perl and Net::LDAP. This module authenticates a user against an LDAP backend. It can be combined with Apache::AuthzLDAP to provide LDAP authorization as well.

CONFIGURATION OPTIONS

The following variables can be defined within the configuration of Directory, Location, or Files blocks or within .htaccess files.

AuthenBaseDN

The base distinguished name with which to query LDAP. By default, the AuthenBaseDN is empty.

LDAPServer

The hostname for the LDAP server to query. By default, LDAPServer is set to localhost.

LDAPPort

The port on which the LDAP server is listening. By default, LDAPPort is set to 389.

UidAttrType

The attribute type name that contains the user's identification. By default, UidAttrType is set to uid.

NOTES

This module has hooks built into it to handle Apache::AuthenCache version 0.04 and higher passing notes to avoid bugs in the set_handlers() method in mod_perl versions prior to 1.26.

AUTHORS

Jason Bodnar, Christian Gilmore <cgilmore@tivoli.com>

See ALSO

httpd(8), ldap(3), mod_perl(1), slapd(8C)

COPYRIGHT

Copyright (C) 2001, International Business Machines Corporation and others. All Rights Reserved.

This module is free software; you can redistribute it and/or modify it under the terms of the IBM Public License.