Mailing List Archive: Apache: Users

How to set environment variable from a LDAP attributes.

Index | Next | Previous | View Threaded

jyavenard at gmail

Jan 25, 2007, 7:55 AM

Post #1 of 10 (1471 views)
Permalink

How to set environment variable from a LDAP attributes.

Hi

I have recently upgraded to Apache 2.2 and while doing so, I now miss
some modules and I'm trying to find a replacement that runs in Apache
2.2

Currently, using the mod_authnz_ldap module, I'm able to authenticate
against a LDAP server. This will set the environment variable
REMOTE_USER.

Is there any way to set other environment variables based on some
attributes retrieved from LDAP?

I found that this module: mod_webauth (http://webauth.stanford.edu)
can do that, but as this was made for Apache 1.3 and 2.0 and with a
specific use in mind, Im not sure I'd like to risk it.

I was hoping that either mod_ldap or mod_authnz_ldap would allow me to
do this. That would be great as it will remove the need to log in
several times in various pages served by Apache.

Thanks in advance for any help or tips.
Cheers
Jean-Yves

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

jyavenard at gmail

Jan 28, 2007, 3:38 AM

Post #2 of 10 (1397 views)
Permalink

Re: How to set environment variable from a LDAP attributes. [In reply to]

So I guess this is not possible.

Or is this distribution list about asking questions but not getting answer ? :)

JY

On 1/26/07, Jean-Yves Avenard <jyavenard [at] gmail> wrote:
> Hi
>
> I have recently upgraded to Apache 2.2 and while doing so, I now miss
> some modules and I'm trying to find a replacement that runs in Apache
> 2.2
>
> Currently, using the mod_authnz_ldap module, I'm able to authenticate
> against a LDAP server. This will set the environment variable
> REMOTE_USER.
>
> Is there any way to set other environment variables based on some
> attributes retrieved from LDAP?
>
> I found that this module: mod_webauth (http://webauth.stanford.edu)
> can do that, but as this was made for Apache 1.3 and 2.0 and with a
> specific use in mind, Im not sure I'd like to risk it.
>
> I was hoping that either mod_ldap or mod_authnz_ldap would allow me to
> do this. That would be great as it will remove the need to log in
> several times in various pages served by Apache.
>
> Thanks in advance for any help or tips.
> Cheers
> Jean-Yves
>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

gerard at seibercom

Jan 28, 2007, 3:51 AM

Post #3 of 10 (1402 views)
Permalink

Re: How to set environment variable from a LDAP attributes. [In reply to]

Jean-Yves Avenard wrote:

> So I guess this is not possible.
>
> Or is this distribution list about asking questions but not getting answer ? :)

[snip]

Please don't top post. If you don't know what that means, Google for it.

You asked you question on a Friday, and then complain that no one has
rushed to your assistance by Sunday. Many users have other things to do
on weekends other than assist you. Wait at least a week before
complaining.

--
Gerard

A: Because it fouls the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing on usenet and in e-mail?

TOPIC: Posting Etiquette

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

nick at webthing

Jan 28, 2007, 4:42 AM

Post #4 of 10 (1395 views)
Permalink

Re: Re: How to set environment variable from a LDAP attributes. [In reply to]

On Sun, 28 Jan 2007, Jean-Yves Avenard wrote:

> So I guess this is not possible.
>
> Or is this distribution list about asking questions but not getting answer ? :)

1. AFAIK none of the regulars on this list is expert in the LDAP support
in Apache.

2. Your question is rather confused. "the environment variable
REMOTE_USER" only exists in CGI, and various environments that
emulate a CGI environment. Authentication enables CGI to set it.
Before anyone could answer your question, we'd need to know
what *you* mean by the question.

The authors of mod_webauth can probably answer, because they'll
know what their module actually does that you want.

--
Nick Kew

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

covener at gmail

Jan 28, 2007, 5:48 AM

Post #5 of 10 (1412 views)
Permalink

Re: How to set environment variable from a LDAP attributes. [In reply to]

On 1/25/07, Jean-Yves Avenard <jyavenard [at] gmail> wrote:
> Hi
> Currently, using the mod_authnz_ldap module, I'm able to authenticate
> against a LDAP server. This will set the environment variable
> REMOTE_USER.
>
> Is there any way to set other environment variables based on some
> attributes retrieved from LDAP?
>

mod_authnz_ldap will stash whatever is in the "attribute' field of the
AuthLDAPURL in the environment variable AUTHENTICATE_foo

(at least that's what it's trying to do)

--
Eric Covener
covener [at] gmail

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

jyavenard at gmail

Jan 28, 2007, 6:45 AM

Post #6 of 10 (1401 views)
Permalink

Re: How to set environment variable from a LDAP attributes. [In reply to]

Hi

On 1/28/07, Gerard <gerard [at] seibercom> wrote:
> Please don't top post. If you don't know what that means, Google for it.

What a constructive post, if you don't know the answer why bother?

JY

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

jyavenard at gmail

Jan 28, 2007, 6:45 AM

Post #7 of 10 (1390 views)
Permalink

Re: Re: How to set environment variable from a LDAP attributes. [In reply to]

Hi

Great, I got some answers :)

On 1/28/07, Nick Kew <nick [at] webthing> wrote:
> 2. Your question is rather confused. "the environment variable
> REMOTE_USER" only exists in CGI, and various environments that
> emulate a CGI environment. Authentication enables CGI to set it.
> Before anyone could answer your question, we'd need to know
> what *you* mean by the question.
>
> The authors of mod_webauth can probably answer, because they'll
> know what their module actually does that you want.
>
> --
> Nick Kew
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe [at] httpd
> " from the digest: users-digest-unsubscribe [at] httpd
> For additional commands, e-mail: users-help [at] httpd
>
>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

jyavenard at gmail

Jan 28, 2007, 6:47 AM

Post #8 of 10 (1389 views)
Permalink

Re: How to set environment variable from a LDAP attributes. [In reply to]

Hi

On 1/29/07, Eric Covener <covener [at] gmail> wrote:
> mod_authnz_ldap will stash whatever is in the "attribute' field of the
> AuthLDAPURL in the environment variable AUTHENTICATE_foo

Thank you for this.
I can't find any references about this feature in the manual. How do
you specify which attribute I'm interested in ? (in my case, the
content of the mail attribute)

Thank you very much for your help.
Jean-Yves

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

jyavenard at gmail

Jan 28, 2007, 6:55 AM

Post #9 of 10 (1392 views)
Permalink

Re: Re: How to set environment variable from a LDAP attributes. [In reply to]

Hi

On 1/28/07, Nick Kew <nick [at] webthing> wrote:
> 1. AFAIK none of the regulars on this list is expert in the LDAP support
> in Apache.
Sorry, I press send before I had finished my message.

> 2. Your question is rather confused. "the environment variable
> REMOTE_USER" only exists in CGI, and various environments that
> emulate a CGI environment. Authentication enables CGI to set it.
> Before anyone could answer your question, we'd need to know
> what *you* mean by the question.

I fail to see where the confusion could come from.
Let me rephrase my problem:
When I successfully authenticate in apache using the authnz_ldap
module, the environment variable REMOTE_USER will be set to the
username I've just authenticated with. So if I log-in using the
username jya, then REMOTE_USER will contain the value jya.

What I would like, is to also retrieve the value of some specific LDAP
attributes and set some environment variables with the retrieved
value.
Yes this will be used by some CGI, that way there's only need to
authenticate once and not several times.
Earlier mod_ldap would allow to set one extra environment variable,
however those do not seem to exist for apache 2.2

>
> The authors of mod_webauth can probably answer, because they'll
> know what their module actually does that you want.

Do they participate in this distribution list? If not, what is the
best place to exchange messages with them?

Thank you all for your help and answers, sorry for stirring some crap
earlier... I was just frustrated in not finding any answers after
several days.

Cheers
Jean-Yves

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

yvo.vandoorn at gmail

Jan 28, 2007, 9:42 AM

Post #10 of 10 (1393 views)
Permalink

Re: How to set environment variable from a LDAP attributes. [In reply to]

On 1/28/07, Jean-Yves Avenard <jyavenard [at] gmail> wrote:
> Hi
>
>
> On 1/28/07, Gerard <gerard [at] seibercom> wrote:
> > Please don't top post. If you don't know what that means, Google for it.
>
> What a constructive post, if you don't know the answer why bother?
>
> JY
>

Why expect an answer when you are being impatient.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe [at] httpd
" from the digest: users-digest-unsubscribe [at] httpd
For additional commands, e-mail: users-help [at] httpd

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads