summaryrefslogtreecommitdiff
path: root/www/ap22-authz-ldap/DESCR
blob: 686f199ff86fe00264d9a4ed4bb41ec8ccb63533 (plain)
1
2
3
4
5
6
7
8
9
10
11
This Apache LDAP authentication/authorization module tries to solve
the following problems that other such modules may not solve in all cases:

  * Map the short form of the distinguished name of a certificate and its
    issuer obtained from the environment of mod_ssl to a user distinguished
    name in an LDAP directory.
  * Check the age of a password in an LDAP directory, denying authorization
    in case the password is to old.
  * Authorize a user based on roles or an arbitrary LDAP filter expression.
  * Authorize a user based on whether he owns a file or belongs to the group
    owning a file.