Apache2.4 authz_core_module module use, authzcoreerror_php Tutorial

Source: Internet
Author: User
Tags ldap

Apache2.4 authz_core_module module Use, Authzcoreerror


Description: Core Authorization
Status: Base
Moduledentifier: Authz_core_module
Sourceile: Mod_authz_core.c
Compatibility: Available in Apache HTTPD 2.3 and later

This module provides a core authorization feature that allows authenticated users to allow or deny access to some sites. Mod_authz_core offers the ability to enroll in various authorization providers. It is usually associated with

Authentication provider modules, such as Mod_authn_file Mod_authz_user, and authorization modules, are used together. It also allows advanced logic to be applied to authorization processing.

Example

The following example creates two different LDAP authorized vendors based on the alias of the Ldap-group authorization provider. This example allows an authorized location to check multiple LDAP group members within the host:

my-group,o=ctx>    authldapbinddn cn=youruser,o=ctx    authldapbindpassword yourpassword    Authldapurl LDAP://ldap.host/o=ctxmy-other-group,o=dev>    authldapbinddn cn= yourotheruser,o=Dev    authldapbindpassword yourotherpassword    authldapurl LDAP://other.ldap.host/ O=dev? cn  /secure/webpages/secure
 
      
  
   Require all
  
    granted        Authbasicprovider file        authtype Basic    authname ldap_protected_place        
  
   #
  
   implied OR operation    
  
   Require ldap-group-
  
   alias1    
  
   Require ldap-group-
  
   alias2 
 
  

Authorization Containers

Authorization container directives < Requireall >, < requireany > and < Requirenone > can be combined to each other and require directives to express complex authorization logic.

Below is an example that expresses the following authorization logic. In order to access resources, the user must be a superadmin user, or an administrative group and an administrator LDAP group and belong to the sales group or LDAP attribute sales department. In addition, in order to access resources, the user must not be part of a temporary worker or LDAP group.

 
      
  
           
   
                
    
     Require
    
     user superadmin            
    
                     
     
      Require
     
       Group Admins                
     
      Require ldap-group cn= administrators,o=
     
      airius                
     
                          
      
        Require
      
       
      
        Require ldap-attribute dept=
      
       "
      
       sales
      
        "                
     
                  
    
     Require        
   
            
   
                
    
     
    
      group temps            
    
     Require Ldap-group cn=temporary employees,o=
    
     airius        
   
        
  
   
 
  

Mod_authz_core provides instructions that can be used by a number of generic authorization providers.

Require env

The env provider allows access to the control server based on the presence of an environment variable. When you need to specify ENV for this env-variable, then the request is allowed to access the environment variable if env-variable exists. The server is able to set environment variables in a flexible manner based on the characteristics of the client request, use the instructions provided by MOD_SETENVIF. Therefore, the directive can be used to allow access based on such factors as the client user agent (browser type), referrer, or other HTTP request header fields.

Setenvif user-agent ^knockknock/2\. 0 let_me_in
 
      
  
   Require
  
    env let_me_in
 
  

In this case, the browser's user agent string, knockknock/2.0 will be allowed access, and all other people will be denied.

When the server finds the path by looking for such internal subrequest DirectoryIndex Mod_autoindex or generating a directory listing, each request Subrequest environment variable is not hereditary. Additionally, the SETENVIF directive is not evaluated separately subrequest due to the API phase Mod_setenvif used.

Original: http://httpd.apache.org/docs/2.4/mod/mod_authz_core.html


Apache 24 How to install with command

What you said with the command to install that must be on the Linux system
There are 2 ways
1, RPM Package installation
The simplest direct use yum-y install httpd so you can
2, the source installation, download the version you want, and then follow the steps below
#tar ZXVF Apache 2.4.*
#cd apache2.4.*
#configure
#make
#make Install
So you can
URL [authoritative expert]

Apache24 will die sometime.

No need to find, can not solve. Win under the common problem, Apache is not win under the product. Win under the recommended use of IIS, trust Microsoft technology.

http://www.bkjia.com/PHPjc/852741.html www.bkjia.com true http://www.bkjia.com/PHPjc/852741.html techarticle Apache2.4 authz_core_module module use, authzcoreerror description:core Authorization status:base Moduledentifier:authz _core_module sourceile:mod_authz_core.c compatibility: ...

  • Contact Us

    The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

    If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

    A Free Trial That Lets You Build Big!

    Start building with 50+ products and up to 12 months usage for Elastic Compute Service

    • Sales Support

      1 on 1 presale consultation

    • After-Sales Support

      24/7 Technical Support 6 Free Tickets per Quarter Faster Response

    • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.