httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Eric Covener <cove...@gmail.com>
Subject Re: [users@httpd] mod_authnz_ldap question
Date Sat, 28 Feb 2009 17:09:31 GMT
On Sat, Feb 28, 2009 at 11:42 AM, Markus Moeller
<huaraz@moeller.plus.com> wrote:
> Has anybody a sample configuration for mod_auth_kerb or mod_auth_gss with
> mod_authnz_ldap ?
>
> I'd like to authenticate the user with GSSAPI/SPNEGO and then authorize with
> ldap groups. The problem I see in my case is that the username has the realm
> (e.g. user@mydomain.com), but my ldap uid does not.  Is there a generic way
> of mapping usernames or a specific option in  mod_authnz_ldap to cut off the
> @mydomain.com part ?

Do you have any other attribute in your ldap that has the very same
user@mydomain.com value?

I am not aware of any way to transform the username before LDAP sees it.
-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message