Re: Question about the list

Hi Andrew.
I'm sure these kind of questions are best answered on httpd- 
[email protected].

there are two options here.
you can either use apaches authentication handling, which will prompt  
you with a dialog for a user/password
OR
you can use rewrite and do a cookie check which redirects non-cookied  
people to a special page which does the LDAP
lookup and cookie setting.

Some people @ columbia wrote a module called mod_auth_pamacea does  
this I believe. the only caveats I see with it are
:- it is GPL
:- the session manager it uses is file based, which won't scale  
(their words) but you could change the session manager to use
    a mysql DB or somesuch if you need scalability

regards
Ian

On 18/08/2005, at 3:30 AM, Andrew Musselman wrote:

> Well, after searching the archive more I found some usage questions;
> hence I will post my own :)
>
> We are trying to shut down web access to all our networked printers on
> campus "the easy way":  set up a proxy server through which only
> selected people can access the printers.  The authentication can be  
> done
> using LDAP.
>
> A couple of methods have been suggested, and I am researching them
> now:
> (1) mod_ssl + mod_auth_ldap + mod_proxy
> (2) mod_ssl + mod_authz_ldap + mod_proxy
> (3) mod_ssl + A nice little PHP login page that queries LDAP before
> turning things over to mod_proxy.
>
> So far I have had success with setting up a virtual host as a forward
> proxy and with activating SSL for LDAP queries through a login  
> page, but
> I'm really confused about something:  how could I set things up so  
> users
> visit some login page, their credentials are checked through LDAP, and
> then they are forwarded to the printer they want?
>
> Does anyone have any suggestions, or has anyone tried this and gotten
> anywhere?  Thanks for your time.
>
> Best,
> Andrew
>
>
> Andrew Musselman
> [email protected]
>
>
>>>> [email protected] 8/17/2005 9:56 AM >>>
>>>>
> Hello--
>
> I have some questions that are not development questions, but I
> couldn't find a list for just the use of mod_proxy.  Does anyone know
> of
> a list that might be appropriate?
>
> Thank you,
> Andrew
>
> Andrew Musselman
> [email protected]
>

--
Ian Holsman
Director
Network Management Systems
CNET Networks
PH: 415-344-2608 (USA) /(++61) 3-9877-0909 (Australia)