/ 
Apache-AuthzLDAP-0.51
River stage zero No dependents
/ Apache::AuthzLDAP

NAME

Apache::AuthzLDAP - mod_perl LDAP Authorization Module

SYNOPSIS

<Directory /foo/bar>
# Authorization Realm and Type (only Basic supported)
AuthName "Foo Bar Authentication"
AuthType Basic

# Any of the following variables can be set.
# Defaults are listed to the right.
PerlSetVar AuthenBaseDN    o=Foo,c=Bar        # Default: Empty String ("")
PerlSetVar AuthzBaseDN     o=Tivoli Systems   # Default: none
PerlSetVar GroupAttrType   gid                # Default: cn
PerlSetVar LDAPServer      ldap.foo.com       # Default: localhost
PerlSetVar LDAPPort        389                # Default: 389
PerlSetVar MemberAttrType  uid                # Default: member
PerlSetVar MemberAttrValue dn                 # Default: cn
PerlSetVar NestedGroups    On                 # Default: off
PerlSetVar UidattrType     userid             # Default: uid

PerlAuthzHandler Apache::AuthzLDAP

require group "My Group" GroupA "Group B"     # Authorize user against
                                              # multiple groups
</Directory>

DESCRIPTION

Apache::AuthzLDAP is designed to work with mod_perl and Net::LDAP. This module authorizes a user against an LDAP backend. It can be combined with Apache::AuthenLDAP to provide LDAP authentication as well.

CONFIGURATION OPTIONS

The following variables can be defined within the configuration of Directory, Location, or Files blocks or within .htaccess files.

AuthenBaseDN

The base distinguished name with which to query LDAP for purposes of authentication. By default, the AuthenBaseDN is blank.

AuthzBaseDN

The base distinguished name with which to query LDAP for purposes of authorization. By default, the AuthzBaseDN is blank.

GroupAttrType

The attribute type name that contains the group's identification. By default, GroupAttrType is set to cn.

MemberAttrType

The attribute type name that contains the group member's identification. By default, MemberAttrType is set to member.

MemberAttrValue

The attribute value contained within the MemberAttrType above. By default, MemberAttrValue is set to cn.

NestedGroups

When the NestedGroups value is on, a recursive group search occurs until the user is found in a group or the deepest group's member list does not contain any groups. By default, NestedGroups is set to off.

UidAttrType

The attribute type name that contains the user's identification. By default, UidAttrType is set to uid.

NOTES

This module has hooks built into it to handle Apache::AuthzCache version 0.02 and higher passing notes to avoid bugs in the set_handlers() method in mod_perl versions prior to 1.26.

AUTHORS

Jason Bodnar, Christian Gilmore <cgilmore@tivoli.com>

See ALSO

httpd(8), ldap(3), mod_perl(1), slapd(8C)

COPYRIGHT

Copyright (C) 2001, International Business Machines Corporation and others. All Rights Reserved.

This module is free software; you can redistribute it and/or modify it under the terms of the IBM Public License.