[svlug] Apache with both MySQL and LDAP auth

[Chris Miller]

On Tue, Dec 2, 2008 at 6:59 PM, Jarl Nilsson <svlug at thinkgland.com> wrote:
> Hi,
>
> I have a set of servers running apache 2.2.  I want to authenticate
> using a MySQL server and an LDAP server for the same directory.  It is a
> legacy setup with some users authenticating against a Win2003 server and
> some users authenticating against the MySQL server.  Please don't ask me
> what I think of the Win2003 server.
>
> I can get the MySQL working.    No problem there.
> I can get LDAP working.  No problem there either.
> The problem comes when I try to make them work together.
>
> Do any of you have any experience authenticating using two different
> high level modules in Apache?  I'm asking the community first before I
> dive headlong into the sources.

My knee-jerk reaction would be to write a small script which does them
both.  Apache can use a Perl script as an authentication backend.  You
could write the backend to check for users from both sources, and even
then attempt to migrate users from one source to the other
transparently.

My existing experience with raw off-the-shelf Apache configuration
directives doesn't suggest any kind of existing multi-source
techniques, though I've been proven wrong before, and will be proven
wrong again.  ;-)

An example Perl-use that is complaint to Apache's specification is here:
http://www.redmine.org/repositories/entry/redmine/trunk/extra/svn/Redmine.pm

It doesn't check against multiple sources (that I know of), but it
could be modified to do just that.

-- 
Registered Linux Addict #431495
http://profile.xfire.com/mrstalinman | John 3:16!
http://www.fsdev.net/ | http://lordsauron.wordpress.com/