English 中文(简体)
阿帕奇:实施黑名单/清单出入控制+LDAP认证
原标题:Apache: Implement blacklist/whitelist access control + LDAP authentication

在阿帕奇,只有让用户进入 绕过两个的最佳途径。 以下测试:

  1. User does not appear in blacklist (alternatively, appears in whitelist)
  2. User has valid LDAP user account

我已经进行了第二次测试,但我现在需要禁止某些有效的LDAP用户。 请注意,Icannot设立了一个由本人代表黑白名单的AD小组。

最佳回答

我已设法这样做。

The config.

    <Location /blacklisted >
        AuthType Basic
        AuthName "PAM"

        AuthBasicProvider ldap
        Require valid-user
        AuthLDAPURL ldap://ldap.example.com/?sAMAccountName?sub
        AuthzLDAPAuthoritative off
        AuthLDAPBindDN bindUser@example.com
        AuthLDAPBindPassword verySecurePasswd

        Order allow,deny
        Deny from 192.168.1
        Allow from all
    </Location>

然而,我仍然不知道,如果我想要将LDAP用户名称而不是IP地址列入黑名单,这是否可行。 (Covener 似乎有些复杂的冲突可能发生,但我没有这样做。

问题回答

暂无回答




相关问题
ajax login using httpRequest?

I am trying to develop my login script to give feedback to the user if the login is valid or not. Basically if it isn t correct a div box will show saying its wrong, if its correct it will show its ...

Remotely authenticating client Windows user on demand

Suppose I am writing a server for a particular network protocol. If I know that the client is running on a Windows machine, is it possible for my server to authenticate the Windows user that owns the ...

Role/Permission based forms authorizing/authentication?

While looking into forms authorizing/authentication, I found that it is possible to do role based authorizing by adding an array of roles to a FormsAuthenticationTicket. That way I can write User....

热门标签