<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 05/19/2015 05:29 AM, thewebbie
wrote:<br>
</div>
<blockquote
cite="mid:CAL8CQ8x5nCsROt_8SxOs86PMN_2rbfeHpSq+zR2_OUerMrA9gQ@mail.gmail.com"
type="cite">
<p dir="ltr">My requirements is to replace dozens of htaccess
folders on one server. Each folder requiring a user group. So
Host based will not work in this case</p>
<p dir="ltr">Matthew Feinberg</p>
<div class="gmail_quote">On May 19, 2015 4:03 AM, "Jan Pazdziora"
<<a moz-do-not-send="true"
href="mailto:jpazdziora@redhat.com">jpazdziora@redhat.com</a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">On Mon, May
18, 2015 at 12:38:47PM -0400, thewebbie wrote:<br>
><br>
> I have been attempting to use my 4.1.4 FreeIPA server to
authenticate<br>
> folders on a web server as a replacement for the normal
htaccess feature. I<br>
> do require group authentication. I have tried just about
online example and<br>
> have only been able to get basic ldap and basic kerbos
authentication. How<br>
> do I go about getting group based authentication working.<br>
<br>
If you do not insist on group based authentication but can use<br>
the more generic host-based access control (which you should
be able<br>
to do because you have IPA), you can use mod_authnz_pam:<br>
<br>
<a moz-do-not-send="true"
href="http://www.adelton.com/apache/mod_authnz_pam/"
target="_blank">http://www.adelton.com/apache/mod_authnz_pam/</a><br>
<br>
<a moz-do-not-send="true"
href="http://www.freeipa.org/page/Web_App_Authentication"
target="_blank">http://www.freeipa.org/page/Web_App_Authentication</a><br>
<br>
The module is packaged in Fedoras, RHEL, and CentOS.<br>
<br>
--<br>
Jan Pazdziora<br>
Senior Principal Software Engineer, Identity Management
Engineering, Red Hat<br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
Was this resolved in some way?<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Director of Engineering for IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>