LPAR2RRD with LDAP

Install mod:

sudo yum install mod_ldap

Modify file /etc/httpd/conf.d/lpar2rrd.conf:

### LPAR2RRD config ###
LDAPSharedCacheSize 500000
LDAPCacheEntries 1024
LDAPCacheTTL 600
LDAPOpCacheEntries 1024
LDAPOpCacheTTL 600
Alias /lpar2rrd  "/home/lpar2rrd/lpar2rrd/www/"
<Directory "/home/lpar2rrd/lpar2rrd/www/">
      Options Indexes FollowSymLinks Includes MultiViews
      AuthLDAPBindDN "uid=admin,cn=users,cn=accounts,dc=gbmdc,dc=dc"
      AuthLDAPBindPassword "Manager20"
      # search user
      AuthLDAPURL "ldap://idcgbmadmipa01.gbmdc.dc:389/cn=users,cn=accounts,dc=gbmdc,dc=dc?uid"
      AuthType Basic
      AuthName "Active Directory password"
      AuthBasicProvider ldap
      # Important, otherwise "(9)Bad file descriptor: Could not open password file: (null)"
      AuthUserFile /dev/null
      # allow only users from the following group(s)
      # Require ldap-group CN=lpar2rrd,OU=Access Groups,OU=UNIX,OU=Services,DC=xorux,DC=com
      Order allow,deny
      Allow from all
      Require valid-user
</Directory>

# CGI-BIN
ScriptAlias /lpar2rrd-cgi/ "/home/lpar2rrd/lpar2rrd/lpar2rrd-cgi/"
<Directory "/home/lpar2rrd/lpar2rrd/lpar2rrd-cgi">
    AllowOverride None
    Options ExecCGI Includes
      AuthLDAPBindDN "uid=admin,cn=users,cn=accounts,dc=gbmdc,dc=dc"
      AuthLDAPBindPassword "Manager20"
      # search user
#      AuthLDAPURL "ldap://idcgbmadmipa01.gbmdc.dc:389/?cn,memberOf?sub?(objectClass=*)"
      AuthLDAPURL "ldap://idcgbmadmipa01.gbmdc.dc:389/cn=users,cn=accounts,dc=gbmdc,dc=dc?uid"
      AuthType Basic
      AuthName "Active Directory password"
      AuthBasicProvider ldap
      # Important, otherwise "(9)Bad file descriptor: Could not open password file: (null)"
      AuthUserFile /dev/null
      # allow only users from the following group(s)
      # Require ldap-group CN=lpar2rrd,OU=Access Groups,OU=UNIX,OU=Services,DC=xorux,DC=com
      Order allow,deny
      Allow from all
      Require valid-user
</Directory>

References

ipa_ldap_lpar2rrd.txt · Last modified: 2020/02/10 14:08
Public Domain Except where otherwise noted, content on this wiki is licensed under the following license: Public Domain