Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My scenario is this. We have a machine that acts as an employee portal giving access to a few web based applications.

What we would like to do is control user access to these applications using a single login website authenticating against LDAP. This application would then display a page to the user giving them a list of applications that they have access to.

However, we need to also deny them access to applications that are not in their list. In essence, setting up apache to provide acls against the different applications on the site. It is important that the user can not bypass by manually entering the URL, and any attempt directs them the the login page.

Is this at all possible??

The challenge is to try and make the access as simple as possible for our users as, well they seem to struggle with URLS of the apps being different when accessed externally rather than internal and this is a way to enable them easy navigation and access.

For information the login site is being written in PHP and using the Zend Framework that will authenticate and get access lists from LDAP.

Thanks in advance.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

From what you have written, I can't quite tell if you want the authentication to be at the Apache (server) level or the php ( application ) level.

If you want to do it at the Apache level:

You can use basic / simple authentication with the mod_auth_ldap module to restrict access to particular directories and sub directories. If you do use this, you should use mod_ssl so the passwords can not be sniffed.

If you want to do it on the application level with php, you should ask in stackoverflow.

share|improve this answer
    
Yes I would like apache to handle the acls but want a nice (web)interface for the user to log in, as it seems that the dialog box for user authentication confuses our users here. Thanks for your help will look into mod_auth_ldap –  Grant Collins Jul 27 '09 at 14:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.