Forum Moderators: phranque

Message Too Old, No Replies

LDAP authentication with file based group authorization

apache, windows, mod_auth_ldap, authgroupfile

         

Jazeker

11:10 am on Nov 19, 2004 (gmt 0)

10+ Year Member



Hi there,

I am running a 1.3.x apache server doing auto-indexing of a file system. Up 'till now I used mod_ntlm to authenticate the users and a groups file to authorize them (works fine). However, mod_ntlm on windows seems to be no longer maintained and with more recent 1.x apache servers the stability of the module seems to decline.

That's why I want to start using apache 2.x with LDAP authentication. I downloaded the mod_auth_ldap of [muquit.com...] (the cache version) and on the LDAP part it works just like it should. However, I set 'LDAPAuthoritative' to Off but the module fails to scan the authenticated user against my groups file (it will try to find the group in the LDAP server). This is rather frustrating. We have an LDAP with 45000 people in there, of which only 200-300 should be allowed access (their logins are in the groups file).

Anyone seen the same problem and found a solution to this? I am open to other solution to my problem as well, since I can still do authentication against the windows domain too, but then I would need a module for that (mod_auth_sspi of the maker of mod_ntlm is no longer maintained for windows as well).

Any help would be greatly appreciated...
Thx
Jaz