Technical Analysis: Active Directory and Linux Identity Management

re: Technical Analysis: Active Directory and Linux Identity Management

angelos — Thu, 10 Apr 2008 10:50:11 GMT

I am using Active Directory in Vivodi Telecom so that I can have a hand made single sign on solution for most of my Unix hosts (winbind rocks ) and even for apache based applications.

For Example on a RHEL4 with apache 2.0.52 you can do the following

AuthType Basic

AuthName "Restricted Access (windows password)"

AuthLDAPEnabled on

AuthLDAPAuthoritative on

AuthLDAPURL ldap://ADserver:389/ou=Organization,dc=domain,dc=net?sAMAccountName?sub?(&(objectclass=user)(memberof=CN=SG-webapp,OU=Groups,OU=Organization,DC=domain,DC=net))

AuthLDAPBindDN readonly@domain.net

AuthLDAPBindPassword ......

require valid-user

</Directory>

The memmberof filter defines an AD security group that is allowed to log in

Quoi de neuf sur les sites Port25 et OpenSource@Microsoft

Porte25: Open Source et Interop @ Microsoft — Fri, 21 Dec 2007 17:44:44 GMT

Depuis mes derniers articles, il y a près d’un mois sous forme d’une « revue de presse » des deux principaux

» Using Windows for Linux Identity Management

» Using Windows for Linux Identity Management — Sun, 16 Dec 2007 19:58:35 GMT

PingBack from http://www.iqubed.biz/blog/2007/12/16/using-windows-for-linux-identity-management/