tags:

views:

1670

answers:

2
+1  Q: 

Apache/Tomcat - LDAP Authentication based on AD Group Membership

We currently have an Apache/Tomcat (5.5) application running and we're using the LDAP authentication feature (by configuring the realm) against a multi domain structure and it's working great. One thing we would like to do is limit access to users based on their membership on a specific group in AD. Basically, only users of GroupA will be alowed to access the app. I'm wondering if this type of configuration is possible. If so, can you point me in the right direction? Thanks in advance.

A: 

I believe you can accomplish this with the mod_authnz_ldap module in apache:

http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html#reqgroup

vinny  2009-01-15 13:49:59
+1  A: 

implement your own realm

http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html

l_39217_l  2009-01-15 18:57:42
Might sound overkill, but implementing a custom realm is *so* easy. Plus you get the source for the builtin realm as working example, to make it really smooth. Very good advice!
Olaf  2009-01-24 10:10:20

related questions

How do I add a MIME type to .htaccess?
Difference between the Apache HTTP Server and Apache Tomcat?
How do I support SSL Client Certificate authentication?
Why can't I connect to my CAS server with Perl's AuthCAS?
Cleanest & Fastest server setup for Django
Installing Apache Web Server on 64 Bit Mac
Running Apache alongside another web server?
Algorithm behind MD5Crypt
Can you compile Apache HTTP Server and redeploy its binaries to a different location ?
mod_rewrite rule to redirect all requests except for one specific path
How do I create a self signed SSL certificate to use while testing a web app.
Software for Webserver Log Analysis?
What is the difference between an endpoint, a service, and a port when working with webservices?
What are the proper permissions for an upload folder with PHP/Apache?
mod_rewrite to alias one file suffix type to another
How do you redirect HTTPS to HTTP?
Using mod_rewrite to Mimic SSL Virtual Hosts?
User authentication on Resin webserver
How do you set up Python scripts to work in Apache 2.0?
Block user access to internals of a site using HTTP_REFERER
.htaccess directives to *not* redirect certain URLs
How can I get the authenticated user name under Apache using plain HTTP authentication and PHP?
Make XAMPP/Apache serve file outside of htdocs
Apache/PHP: error_log per Virtual Host?
How do I track file downloads with apache/PHP