Recent changes to Home

Home modified by Hendrik

Hendrik — Tue, 20 Feb 2018 21:02:20 -0000

Home modified by Hendrik

Hendrik — Tue, 20 Feb 2018 19:01:15 -0000

--- v17
+++ v18
@@ -15,7 +15,7 @@

 ### Configuration Examples:
-1. **accept any userid**
+* **accept userid from http header field**

 ~~~~~~~~~
     <Location cgi-bin="">

Home modified by Hendrik

Hendrik — Wed, 17 Jun 2015 19:21:35 -0000

--- v16
+++ v17
@@ -25,7 +25,7 @@
         # mod_auth_trustheader.c
         AuthType TrustHeader
         AuthTrustHeaderProvider anon
-        AuthTrustHeader X-USERID
+        AuthTrustHeader %{HTTP:X-USERID}
         # mod_authn_anon.c
         Anonymous '*'
         Anonymous_MustGiveEmail off
@@ -48,7 +48,7 @@
         # mod_auth_trustheader.c
         AuthType TrustHeader
         AuthTrustHeaderProvider anon
-        AuthTrustHeader X-USERID
+        AuthTrustHeader %{HTTP:X-USERID}
         # mod_authn_anon.c
         Anonymous '*'
         Anonymous_MustGiveEmail off
@@ -62,3 +62,27 @@
 ~~~~~~~~~
  

+* **accept only PKI certificates with serial number present in my ldap** 
+
+~~~~~~~~~
+    <Location cgi-bin="">
+        # only trust client certificates of my client CA
+        SSLVerfiyClient require
+        SSLRequire ( %{SSL_CLIENT_I_DN} eq "DN of my client CA" )
+        # mod_auth_trustheader.c
+        AuthType TrustHeader
+        AuthTrustHeaderProvider anon
+        AuthTrustHeader %{SSL:SSL_CLIENT_M_SERIAL}
+        # mod_authn_anon.c
+        Anonymous '*'
+        Anonymous_MustGiveEmail off
+        Anonymous_NoUserId off
+        Anonymous_VerifyEmail  off
+        Anonymous_LogEmail off
+        # mod_authnz_ldap
+        # search entry in ldap by attribute "pkiserial"
+        AuthLDAPURL ldap://ldaphost:389/o=yourorg?pkiserial,uid?sub
+        Require ldap-group cn=mygroup,o=yourorg
+    </Location>
+~~~~~~~~~
+

Home modified by Hendrik

Hendrik — Wed, 17 Jun 2015 19:06:38 -0000

WikiPage Home modified by Hendrik

Hendrik — Tue, 31 Jul 2012 20:52:15 -0000

WikiPage Home modified by Hendrik

Hendrik — Sun, 15 Apr 2012 20:06:42 -0000

--- v13 
+++ v14 
@@ -10,6 +10,10 @@
 Here we are working with multiple auth providers as described in the [httpd.apache 2.4 Docu](http://httpd.apache.org/docs/2.4/howto/auth.html#multprovider "Authentication, Authorization and Access Control for HTTPD Server").   
 *works also in httpd.apache 2.2*
 
+### Installation and Configuration
+[mod_auth_trustheader documentation](http://sourceforge.net/p/trustheader/wiki/Home/attachment/mod_auth_trustheader.html) attached to this wiki space
+
+
 ### Configuration Examples:
 1. **accept any userid**

WikiPage Home modified by Hendrik

Hendrik — Sun, 15 Apr 2012 19:48:24 -0000

--- v12 
+++ v13 
@@ -2,19 +2,15 @@
 ====================
 
 
-### Content ###
-
-
+
 * Project Admins: [[project_admins]]
-* [[download_button]] 
-
- 
-
-### Related Documentation:
+
+
+### Related Documentation: ###
 Here we are working with multiple auth providers as described in the [httpd.apache 2.4 Docu](http://httpd.apache.org/docs/2.4/howto/auth.html#multprovider "Authentication, Authorization and Access Control for HTTPD Server").   
 *works also in httpd.apache 2.2*
 
 ### Configuration Examples:
 1. **accept any userid**
 
 ~~~~~~~~~
@@ -32,12 +28,12 @@
         Anonymous_NoUserId off
         Anonymous_VerifyEmail  off
         Anonymous_LogEmail off
         require valid-user
     
 ~~~~~~~~~
  
 
 
 * **accept only userids also present in my ldap**
 
 ~~~~~~~~~
@@ -55,11 +51,10 @@
         Anonymous_NoUserId off
         Anonymous_VerifyEmail  off
         Anonymous_LogEmail off
         # mod_authnz_ldap
         AuthLDAPURL ldap://ldaphost:389/o=yourorg?uid?sub
         Require ldap-group cn=mygroup,o=yourorg
     
 ~~~~~~~~~
  
 
-The wiki uses [Markdown](/p/trustheader/wiki/markdown_syntax/) syntax.

WikiPage Home modified by Hendrik

Hendrik — Sun, 15 Apr 2012 19:46:50 -0000

--- v11 
+++ v12 
@@ -8,6 +8,7 @@
 * Project Admins: [[project_admins]]
 * [[download_button]] 
 
+ 
 
 ### Related Documentation:
 Here we are working with multiple auth providers as described in the [httpd.apache 2.4 Docu](http://httpd.apache.org/docs/2.4/howto/auth.html#multprovider "Authentication, Authorization and Access Control for HTTPD Server").

WikiPage Home modified by Hendrik

Hendrik — Sun, 15 Apr 2012 19:45:46 -0000

--- v10 
+++ v11 
@@ -6,7 +6,8 @@
 
 
 * Project Admins: [[project_admins]]
-* Downloads: [[download_button]] 
+* [[download_button]] 
+
 
 ### Related Documentation:
 Here we are working with multiple auth providers as described in the [httpd.apache 2.4 Docu](http://httpd.apache.org/docs/2.4/howto/auth.html#multprovider "Authentication, Authorization and Access Control for HTTPD Server").

WikiPage Home modified by Hendrik

Hendrik — Tue, 10 Apr 2012 22:45:33 -0000

--- v9 
+++ v10 
@@ -6,7 +6,7 @@
 
 
 * Project Admins: [[project_admins]]
-* Downloads: [[download_button]] (project is just born - downloads coming soon)
+* Downloads: [[download_button]] 
 
 ### Related Documentation:
 Here we are working with multiple auth providers as described in the [httpd.apache 2.4 Docu](http://httpd.apache.org/docs/2.4/howto/auth.html#multprovider "Authentication, Authorization and Access Control for HTTPD Server").