6f40746b84
backend. OpenID-LDAP is a small, fairly lightweight, standalone, multi user Identity Provider for OpenID authentication. It comprises a few PHP scripts that can be used by one individual to run their own personal OpenID IdP. This program requires no external libraries, and has very minimal requirements. It should run on any PHP server (v4.2+), and can support OpenID in 'Smart Mode.' This program caches all data using built-in PHP session handling, so it requires no database, and no explicit write access to the file system. OpenID-LDAP is NOT compatible with Suhosin or other hardened PHP systems. WWW: http://www.openid-ldap.org/ PR: ports/175258 Submitted by: Matthew X. Economou <xenophon+freebsd@irtnog.org>
43 lines
1.7 KiB
Text
43 lines
1.7 KiB
Text
**********************************************************************
|
|
The OpenID-LDAP identity provider has been installed in the directory
|
|
%%WWWDIR%%.
|
|
|
|
SECURITY WARNING: OpenID-LDAP uses HTTP Basic Authentication,
|
|
which means that users' passwords are transmitted in the clear
|
|
(unencrypted) between the web browser and the web server. By
|
|
default, OpenID-LDAP requires the use of an SSL connection and
|
|
will fail with an error message if the web server doesn't use SSL.
|
|
|
|
You must configure OpenID-LDAP to work with your directory server by
|
|
editing the file %%WWWDIR%%/ldap.php.
|
|
|
|
You must add the appropriate configuration directives to your web
|
|
server configuration file. A typical configuration for Apache HTTPD
|
|
2.2 installed from the FreeBSD port would involve adding the following
|
|
lines to %%LOCALBASE%%/etc/apache22/Includes/openid-ldap.conf:
|
|
|
|
AddType application/x-httpd-php .php
|
|
|
|
Alias /openid-ldap %%WWWDIR%%
|
|
|
|
<IfModule dir_module>
|
|
DirectoryIndex index.php
|
|
</IfModule>
|
|
|
|
<Directory %%WWWDIR%%>
|
|
Options Indexes
|
|
AllowOverride All
|
|
Order allow,deny
|
|
Allow from all
|
|
</Directory>
|
|
|
|
<IfModule rewrite_module>
|
|
RewriteEngine on
|
|
RewriteCond %{REQUEST_URI} !^/openid-ldap/(.+)\.php(.*)$
|
|
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /openid-ldap/([A-Za-z0-9]+)\?(.*)\ HTTP/
|
|
RewriteRule ^/(.*)$ http://%{SERVER_NAME}/openid-ldap/index.php?user=%1&%2 [proxy]
|
|
RewriteCond %{REQUEST_URI} !^/openid-ldap/(.+)\.php(.*)$
|
|
RewriteRule ^/([A-Za-z0-9]+)$ http://%{SERVER_NAME}/openid-ldap/index.php?user=$1 [proxy]
|
|
</IfModule>
|
|
|
|
**********************************************************************
|