Configure NGINX on windows to use LDAP

v_shirin nginx-forum at forum.nginx.org
Mon Apr 25 02:30:59 UTC 2016


Hello All

I would like to know what configuration is needed to configure NGINX on
windows to use LDAP.

My nginx.conf looks like below but am not able to start the nginx service. I
have added the 'ldap_server ProdLDAP ' section under http and 2 other
paramaters named 'auth_ldap_xxx'  under server sectiob. By removing these
ldap parametes, nginx service starts without any issues.


worker_processes  1;
pid        logs/nginx.pid;
events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request"
'
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    log_format timing '$remote_addr - $remote_user [$time_local]  '
        '"$request" $status $body_bytes_sent $request_length "$ssl_protocol"
"$ssl_cipher" '
        '$request_time $pipe $gzip_ratio "$upstream_cache_status"
"$upstream_addr" $upstream_status $upstream_response_time $connection';



    sendfile        on;



    keepalive_timeout  65;
 
	ldap_server ProdLDAP {
        url
ldaps://ldapprod.company.com:636/ou=people,o=company?cn=esb-dev?sub?(objectClass=user);
        binddn "svcaccount";
        binddn_passwd password;
        group_attribute uniquemember;
        group_attribute_is_dn on;
        require valid_user;
        }
	  

    server {
        listen       51000;
        server_name  localhost;
		
        auth_ldap "Forbidden";
        auth_ldap_servers ProdLDAP;
		
        location / {
            root   html;
            index  index.html index.htm;
        }
		
		location /ProdLogs {
           autoindex on;
           default_type  text/plain;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

    }
}

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,266349,266349#msg-266349



More information about the nginx mailing list