ansible-role-eom/templates/httpd-auth.conf.j2
2024-08-06 11:45:36 -04:00

39 lines
990 B
Django/Jinja

LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
LoadModule ldap_module modules/mod_ldap.so
# Base
<LocationMatch "^/">
AuthType basic
AuthName OpenLDAP
AuthBasicProvider ldap
AuthLDAPBindDN "cn=admin,dc=eom,dc=dev"
AuthLDAPBindPassword "{{ ldap_admin_password }}"
AuthLDAPURL "ldap://openldap/dc=eom,dc=dev?uid"
<RequireAny>
Require method GET OPTIONS
Require valid-user
</RequireAny>
</LocationMatch>
# Users
<LocationMatch "^/eric">
AuthType basic
AuthName OpenLDAP
AuthBasicProvider ldap
AuthLDAPBindDN "cn=admin,dc=eom,dc=dev"
AuthLDAPBindPassword "{{ ldap_admin_password }}"
AuthLDAPURL "ldap://openldap/dc=eom,dc=dev?uid??(uid=eric)"
Require valid-user
</LocationMatch>
# Git
<LocationMatch "^/.*/git-receive-pack$">
AuthType basic
AuthName OpenLDAP
AuthBasicProvider ldap
AuthLDAPBindDN "cn=admin,dc=eom,dc=dev"
AuthLDAPBindPassword "{{ ldap_admin_password }}"
AuthLDAPURL "ldap://openldap/dc=eom,dc=dev?uid"
Require valid-user
</LocationMatch>