auth_ldap

[Igor Sysoev]

On Tue, Aug 19, 2008 at 12:23:02AM +0200, Markus Teichmann wrote:

> as a new user to this list, I just want to contribute my little auth_ldap 
> module. I hope you enjoy it. Here is an example conf file:
> 
> http {
>     # LDAP URI
>     auth_ldap_uri "ldap://127.0.0.1";
> 
>     server {
>         listen       80;
>         server_name  localhost;
> 
>         location / {
> 	    # Realm
>             auth_ldap "LDAP Request";
>             # Search Base
>             auth_ldap_dn "ou=People,dc=chaos,dc=jmt";
>             # The Attribute searching for. Normaly this is uid or cn
>             auth_ldap_attribute "uid";
> 	    # Activate the authenticaten
> 	    # require off; will disable the module.
>             require ldap-user;
> 
>             root   html;
>             index  index.html index.htm;
>         }
> ...
> 
> Also I have some questions during this coding. First of all is there a 
> place for third party modules?
> And much more important for me: how does the async calling mechanism in 
> nginx work? I've played around with NGX_AGAIN, but I doesn't got the 
> expected result. So all the ldap code ist sync now. Would be nice to 
> change this.

Yes, it should be chnaged to async way, otherwise whole nginx worker
will be block while LDAP authentication.

Also, nginx has no "require" concept as in Apache.
Instead is better to use "auth_ldap off".


-- 
Igor Sysoev
http://sysoev.ru/en/