在APACHE中,使用Iplanet Directory Server 5.0 来进行用户认证,可以做到分级认证.环境:RHEL 3.0+SOLARIS 9
RHEL上运行APACHE 2.054.authz_ldap-0.22-3
SOLARIS 上运行iplanet Directory Server 5.0.
httpd.conf配置如下:
<IfModule mod_authz_ldap.c>
<Location "/">
AuthzLDAPEngine on
AuthzLDAPServer "server name or ip"
AuthzLDAPUserBase "basedn"
AuthzLDAPUserKey uid
AuthzLDAPUserScope subtree
AuthType basic
AuthName "用户登录"
require valid-user
</Location>
<Location "/admin/">
AuthzLDAPEngine on
AuthzLDAPServer "server name or ip"
AuthzLDAPUserBase "basedn"
AuthzLDAPUserKey uid
AuthzLDAPUserScope subtree
AuthzLDAPRoleAttributeName uid
AuthType basic
AuthName "管理员登录"
require role admin
</Location>
</IfModule>
|