<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>〈active directory〉彙整頁面 - MIS 的流水年華</title>
	<atom:link href="https://jameschien.mooo.com/wordpress/tag/active-directory/feed/" rel="self" type="application/rss+xml" />
	<link>https://jameschien.mooo.com/wordpress/tag/active-directory/</link>
	<description>流水記事</description>
	<lastBuildDate>Wed, 05 Jan 2011 01:44:01 +0000</lastBuildDate>
	<language>zh-TW</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.4</generator>
	<item>
		<title>在Apache網頁驗證AD使用者</title>
		<link>https://jameschien.mooo.com/wordpress/2008/12/01/%e5%9c%a8apache%e7%b6%b2%e9%a0%81%e9%a9%97%e8%ad%89ad%e4%bd%bf%e7%94%a8%e8%80%85/</link>
					<comments>https://jameschien.mooo.com/wordpress/2008/12/01/%e5%9c%a8apache%e7%b6%b2%e9%a0%81%e9%a9%97%e8%ad%89ad%e4%bd%bf%e7%94%a8%e8%80%85/#respond</comments>
		
		<dc:creator><![CDATA[James]]></dc:creator>
		<pubDate>Mon, 01 Dec 2008 02:19:31 +0000</pubDate>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[active directory]]></category>
		<category><![CDATA[apache]]></category>
		<guid isPermaLink="false">http://jameschien.no-ip.biz/wordpress/2008/12/01/%e5%9c%a8apache%e7%b6%b2%e9%a0%81%e9%a9%97%e8%ad%89ad%e4%bd%bf%e7%94%a8%e8%80%85/</guid>

					<description><![CDATA[<p>1. 讓Apache 2.2支援PAM驗證 下載安裝Mod_Auth_External apxs -c mod &#8230; <a href="https://jameschien.mooo.com/wordpress/2008/12/01/%e5%9c%a8apache%e7%b6%b2%e9%a0%81%e9%a9%97%e8%ad%89ad%e4%bd%bf%e7%94%a8%e8%80%85/" class="more-link">閱讀全文 <span class="screen-reader-text">在Apache網頁驗證AD使用者</span></a></p>
<p>〈<a href="https://jameschien.mooo.com/wordpress/2008/12/01/%e5%9c%a8apache%e7%b6%b2%e9%a0%81%e9%a9%97%e8%ad%89ad%e4%bd%bf%e7%94%a8%e8%80%85/">在Apache網頁驗證AD使用者</a>〉這篇文章最早發佈於《<a href="https://jameschien.mooo.com/wordpress">MIS 的流水年華</a>》。</p>
]]></description>
										<content:encoded><![CDATA[<p>1. 讓Apache 2.2支援PAM驗證<br />
下載安裝<a href="http://unixpapa.com/mod_auth_external/">Mod_Auth_External</a><br />
apxs -c mod_authnz_external.c<br />
apxs -i -a mod_authnz_external.la</p>
<p>2.安裝密碼認證程式<br />
下載安裝 <a href="http://www.unixpapa.com/pwauth/">pwauth</a><br />
編輯 config.h ,<br />
#define PAM (原為#define SHADOW_SUN)<br />
#define SERVER_UIDS 48 (請根據Apache執行者的 UID 調整)<br />
關掉下面這行(因為winbind取得的ID遠大於500)<br />
/*#define MIN_UNIX_UID 500<br />
編譯<br />
[root@centos5 pwauth]# make<br />
[root@centos5 pwauth]# mv pwauth /usr/local/sbin<br />
[root@centos5 pwauth]# mv unixgroup /usr/local/sbin</p>
<p>3.修改 httpd.conf ,理論上安裝mod_auth_external 時會自動增加下面這行<br />
LoadModule authnz_external_module modules/mod_authnz_external.so</p>
<p>4.修改conf.d的mrtg.conf (以修改這個檔為範例)<br />
&lt;Ifmodule&gt;<br />
AddExternalAuth pwauth /usr/sbin/pwauth<br />
SetExternalAuthMethod pwauth pipe<br />
&lt;/Ifmodule&gt;<br />
&lt;Directory&gt;<br />
AllowOverride AuthConfig<br />
&lt;/Directory&gt;</p>
<p>5.新增 /etc/pam.d/pwauth 內容如下<br />
auth required pam_nologin.so<br />
auth include system-auth<br />
account include system-auth<br />
session include system-auth</p>
<p>6.在mrtg下新增.htaccess 內容如下<br />
AuthType Basic<br />
AuthName Login<br />
AuthBasicProvider external<br />
AuthExternal pwauth<br />
GroupExternal unixgroup<br />
require valid-user</p>
<p>7. Winbind 部分請自行設定完整</p>
<p>〈<a href="https://jameschien.mooo.com/wordpress/2008/12/01/%e5%9c%a8apache%e7%b6%b2%e9%a0%81%e9%a9%97%e8%ad%89ad%e4%bd%bf%e7%94%a8%e8%80%85/">在Apache網頁驗證AD使用者</a>〉這篇文章最早發佈於《<a href="https://jameschien.mooo.com/wordpress">MIS 的流水年華</a>》。</p>
]]></content:encoded>
					
					<wfw:commentRss>https://jameschien.mooo.com/wordpress/2008/12/01/%e5%9c%a8apache%e7%b6%b2%e9%a0%81%e9%a9%97%e8%ad%89ad%e4%bd%bf%e7%94%a8%e8%80%85/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
