Community Forums

1. 

   enel
   Member
   Posted 11 years ago

   Hello,

   I have installed MediaCore-0.9.1. Everything is working fine until I enable LDAP for authentication. I am using mod_wsgi with Apache.

   This is the relevant part from my configuration file (the rest of configuration is straight forward according to the installation documentation):

   <Location "/">
   Order deny,allow
   Deny from all
   Allow from 192.168.132.0/24
   Require valid-user
   # LDAP part
   AuthName "IC internal"
   AuthType Basic
   AuthBasicProvider ldap
   AuthzLDAPAuthoritative off
   AuthLDAPURL ldaps://ldap.mydomain.at:636/ou=Accounts,o=MyOrg,c=AT
   </Location>

   LDAP deactivated:
   Login at http://archive.mydomain.at/admin successful as expected.

   LDAP activated:
   http://archive.mydomain.at/admin
   The "Whoopsadaisy!" (401 error) page is displayed instead of the admin site, the login page does not appear at all.

   http://archive.mydomain.at/login login is successful but nothing is displayed and the URL changed to http://archive.mydomain.at/login/submit?__logins=0&came_from=http%3A//archive.mydomain.at/admin

   In all cases I can login to the archive http://archive.mydomain.at/ and watch the videos, only the admin area is affected.

   Thanks for any hints and advices.
2. 

   enel
   Member
   Posted 11 years ago

   Just found out that this solution is working for me:
   http://mediacorecommunity.org/community/topic/private-mediacore-behind-a-password#post-731
3. 

   devel
   Member
   Posted 7 years ago

   Well I did just filter out the admin and login urls from LDAP auth using location match directives:

   # Location match excepting Admin/Login
   <LocationMatch "^/mediadrop/(admin|login)/*">
   Order allow,deny
   Allow from all
   </LocationMatch>

   # LDAP authentication
   <LocationMatch "^/mediadrop/(?!(admin|login))/*">
   AuthType Basic
   AuthBasicProvider ldap
   AuthName "Use LDAP Login and Password"
   AuthLDAPURL "ldap://<myldap>?uid?sub?(objectClass=*)"
   Require valid-user
   </LocationMatch>

RSS feed for this topic

Reply

You must log in to post.