ondrejv604/mod_authz_sss

Description

Authorizes access to Apache web location based on groups the user is member of. It uses SSSD to determine group membership. It does something similar to mod_authnz_ldap but leveraging SSSD capabilities, so no extra configuration needed.

Installation Instructions

• build and install the apache module
• ensure sssd (with backend IPA/AD/ldap) is configured and working on the host
• enable InfoPipe interface of sssd
• grant Apache access to the dbus infopipe, i.e. [ifp] allowed_uids = root, apache
• set up authentication using mod_auth_gssapi or mod_auth_kerb
• limit access to the webpage: [location] .... require sss-group my_ldap_group [/location]

Active Releases

The following unofficial repositories are provided as-is by owner of this project. Contact the owner directly for bugs or issues (IE: not bugzilla).

Release	Architectures	Repo Download
Fedora rawhide	x86_64 (6)*	Fedora rawhide (1 downloads)
Rhel 10	x86_64 (0)*	Rhel 10 (3 downloads)
Rhel 9	x86_64 (0)*	Rhel 9 (2 downloads)

* Total number of downloaded packages.