All files from this thread

File Name	File Size		Posted by	Date
Nginx_kerberos_auth1.png	134.1 KB	open | download	Joshua Schaeffer	09/14/2016	Read message
logs.tar.gz	6.2 KB	open | download	Joshua Schaeffer	09/14/2016	Read message

>
>
>> I'm using that one to authenticate my users.
>
> auth_ldap_cache_enabled on;
> ldap_server my_ldap_server {
> url ldaps://ldap.example.org/dc=u
> sers,dc=mybase?uid?sub;
> binddn cn=nginx,dc=mybase;
> binddn_passwd ...;
> require valid_user;
> }
>
> server {
> ...
> location / {
> auth_ldap "foobar";
> auth_ldap_servers "my_ldap_server";
>
> root /srv/www/...;
> }
> }
>

Thanks having a config to compare against is always helpful for me.


>
> this is like documented on https://github.com/kvspb/nginx-auth-ldap exept
> my auth_ldap statements are inside the location.
> while docs suggest them outside.
> Q: does that matter?
>

From my understanding of Nginx, no, since location is lower in the
hierarchy it will just override any auth_ldap directives outside of it.


>
> I found it useful to explicit set "auth_ldap_cache_enabled on" but cannot
> remember the detailed reasons.
> Finally: it's working as expected for me (basic auth, no Kerberos)
>

Any chance anybody has played around with Kerberos auth? Currently my SSO
environment uses GSSAPI for most authentication.

Thanks,
Joshua Schaeffer
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx