apache_ldap

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
apache_ldap [2019/02/07 17:52] – created adminapache_ldap [2019/02/07 17:55] (current) – [Prefered possiblilty] admin
Line 10: Line 10:
 Apache needs following settings to work with LDAPS authentication. You must edit ''%%/etc/openldap/ldap.conf%%'' file to enable SSL and TLS: Apache needs following settings to work with LDAPS authentication. You must edit ''%%/etc/openldap/ldap.conf%%'' file to enable SSL and TLS:
  
-<code>+<code bash>
 # #
 # LDAP Defaults # LDAP Defaults
Line 38: Line 38:
 You must create a configuration file in ''%%/etc/apache2/conf.d/ldaps.conf%%'' to configure LDAPS depend settings: You must create a configuration file in ''%%/etc/apache2/conf.d/ldaps.conf%%'' to configure LDAPS depend settings:
  
-<code>+<code bash>
 LDAPVerifyServerCert On LDAPVerifyServerCert On
 LDAPTrustedMode SSL LDAPTrustedMode SSL
Line 54: Line 54:
 Just create a configuration file (''%%/etc/apache2/conf.d/ldaps.conf%%'') and put following content into it: Just create a configuration file (''%%/etc/apache2/conf.d/ldaps.conf%%'') and put following content into it:
  
-<code>+<code bash>
 LDAPVerifyServerCert Off LDAPVerifyServerCert Off
 LDAPTrustedMode SSL LDAPTrustedMode SSL
Line 76: Line 76:
 Get the certificate from official certification reseller and put it into /etc/ssl/cert folder. You must hash link the new file for SSL, just use this [[https://intranet.example.com/svn/TrivadisIT/Scripting/trunk/ssl/make-ca-symlinks.sh|make-ca-symlinks.sh script]] to do it: Get the certificate from official certification reseller and put it into /etc/ssl/cert folder. You must hash link the new file for SSL, just use this [[https://intranet.example.com/svn/TrivadisIT/Scripting/trunk/ssl/make-ca-symlinks.sh|make-ca-symlinks.sh script]] to do it:
  
-<code>+<code bash>
 /opt/jobs/make-ca-symlinks.sh --dir /etc/ssl/certs /opt/jobs/make-ca-symlinks.sh --dir /etc/ssl/certs
 </code> </code>
Line 86: Line 86:
 First, you must get the certificate using this small script from LDAP server: First, you must get the certificate using this small script from LDAP server:
  
-<code>+<code bash>
 #!/bin/sh #!/bin/sh
 # #
Line 100: Line 100:
 An example for ad.example.com on port 636: An example for ad.example.com on port 636:
  
-<code> +<code bash
-/opt/jobs/get-ssl-cert.sh ad.example.com 636+get-ssl-cert.sh ad.example.com 636
 </code> </code>
- 
-You can get it [[https://intranet.example.com/svn/TrivadisIT/Scripting/trunk/ssl/get-ssl-cert.sh|here]]. 
  
 Now, you must configure (add the certificat in) openldap to use this certification chain file. Just add this line into''%%/etc/openldap/ldap.conf%%'': Now, you must configure (add the certificat in) openldap to use this certification chain file. Just add this line into''%%/etc/openldap/ldap.conf%%'':
  • apache_ldap.1549558326.txt.gz
  • Last modified: 2019/02/07 17:52
  • by admin