Benutzer-Werkzeuge
tmp
Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
| Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
|
tmp [2025/12/04 15:15] admin |
— (aktuell) | ||
|---|---|---|---|
| Zeile 1: | Zeile 1: | ||
| - | < | ||
| - | apt install apache2 | ||
| - | a2enmod auth_basic ldap authnz_ldap ssl | ||
| - | systemctl reload apache2 | ||
| - | </ | ||
| - | < | ||
| - | < | ||
| - | AuthType Basic | ||
| - | AuthName " | ||
| - | AuthBasicProvider ldap | ||
| - | |||
| - | # 1) LDAP-Query: BaseDN / Attribut / Scope / Filter | ||
| - | # Single-Domain: | ||
| - | AuthLDAPURL " | ||
| - | |||
| - | # 2) Bind-User (Service-Account) fürs Suchen der User-DN (AD erlaubt anonym i.d.R. nicht) | ||
| - | AuthLDAPBindDN " | ||
| - | AuthLDAPBindPassword " | ||
| - | |||
| - | # Optional, aber bei AD häufig hilfreich: | ||
| - | LDAPReferrals Off | ||
| - | |||
| - | # A) Jeder gültige AD-User: | ||
| - | # Require valid-user | ||
| - | |||
| - | # B) Oder nur Mitglieder einer AD-Gruppe: | ||
| - | AuthLDAPGroupAttribute member | ||
| - | AuthLDAPGroupAttributeIsDN On | ||
| - | AuthLDAPMaxSubGroupDepth 5 | ||
| - | Require ldap-group CN=WebApp-Users, | ||
| - | </ | ||
| - | </ | ||
| - | |||
| - | < | ||
| - | ─$ ldapsearch -H ldap:// | ||
| - | # extended LDIF | ||
| - | # | ||
| - | # LDAPv3 | ||
| - | # base < | ||
| - | # filter: sAMAccountName=manuel.zarat | ||
| - | # requesting: dn | ||
| - | # | ||
| - | |||
| - | # Zarat Manuel, USER-INFRA-IT-Microsoft365, | ||
| - | dn: CN=Zarat Manuel, | ||
| - | | ||
| - | |||
| - | # search reference | ||
| - | ref: ldap:// | ||
| - | |||
| - | # search reference | ||
| - | ref: ldap:// | ||
| - | |||
| - | # search reference | ||
| - | ref: ldap:// | ||
| - | |||
| - | # search result | ||
| - | search: 2 | ||
| - | result: 0 Success | ||
| - | |||
| - | # numResponses: | ||
| - | # numEntries: 1 | ||
| - | # numReferences: | ||
| - | |||
| - | ┌──(manuel㉿kali)-[~] | ||
| - | └─$ | ||
| - | </ | ||
| - | |||
| - | |||
| - | < | ||
| - | GNU nano 8.6 / | ||
| - | IncludeOptional sites-enabled/ | ||
| - | |||
| - | < | ||
| - | AuthType Basic | ||
| - | AuthName " | ||
| - | AuthBasicProvider ldap | ||
| - | |||
| - | # 1) LDAP-Query: BaseDN / Attribut / Scope / Filter | ||
| - | # Single-Domain: | ||
| - | AuthLDAPURL " | ||
| - | |||
| - | # 2) Bind-User (Service-Account) fürs Suchen der User-DN (AD erlaubt anonym i.d.R. nicht) | ||
| - | AuthLDAPBindDN " | ||
| - | AuthLDAPBindPassword " | ||
| - | |||
| - | # Optional, aber bei AD häufig hilfreich: | ||
| - | LDAPReferrals Off | ||
| - | |||
| - | # A) Jeder gültige AD-User: | ||
| - | Require valid-user | ||
| - | |||
| - | # B) Oder nur Mitglieder einer AD-Gruppe: | ||
| - | # | ||
| - | # | ||
| - | # | ||
| - | #Require ldap-group CN=WebApp-Users, | ||
| - | </ | ||
| - | </ | ||
tmp.1764857753.txt.gz · Zuletzt geändert: 2025/12/04 15:15 von admin
Seiten-Werkzeuge
Falls nicht anders bezeichnet, ist der Inhalt dieses Wikis unter der folgenden Lizenz veröffentlicht: CC Attribution-NoDerivatives 4.0 International
