Setting Up LDAP Authenticated Directory in Apache HTTPD

Channel:
United States i12bretro
Subscribers:
14,500
Published on ● Video Link: https://www.youtube.com/watch?v=ysqKUzgCCi4


Duration: 2:53
4,198 views
23

#PHP #ApacheHTTPD #ActiveDirectory #LDAP

Full steps can be found at https://i12bretro.github.io/tutorials/0037.html

In this quick video learn how to setup LDAP/Active Directory authentication on an Apache webserver to secure web based applications.
 
--------------------------------------------------------------------
Active Directory Setup
--------------------------------------------------------------------
   01. Open Active Directory Users and Computers
   02. Expand the domain ≫ Users
   03. Right Click Users ≫ New ≫ User
   04. Create a read only account to use for LDAP binding
    First Name: Read
    Last Name: Only
    User logon name: readonly_svc
   05. Click Next
   06. Set the user's password and confirm it
   07. Uncheck User must change password on next logon
   08. Check User cannot change password
   09. Check Password never expires
   10. Click Next
   11. Click Finish
   12. Right Click Users ≫ New ≫ Group
   13. Give the group a name and click OK
   14. Right Click the newly created group ≫ Properties
   15. Select the Members tab ≫ Click Add...
   16. Add users that will be allowed access to the web application
   17. Click OK
 
--------------------------------------------------------------------
Configuring Apache HTTPD for LDAP
--------------------------------------------------------------------
   01. Navigate to the Apache install directory/conf in Explorer
   02. Edit httpd.conf in a text editor
   03. Find the authnz_ldap_module and make sure it is enabled by removing the # at the start of the line
         LoadModule authnz_ldap_module modules/mod_authnz_ldap.so
   04. Find the ldap_module and make sure it is enabled by removing the # at the start of the line
         LoadModule ldap_module modules/mod_ldap.so
   05. Create a Location block to enable LDAP authentication for the specified directory
         ≪location /ldaptest≫
         # Basic authentication with LDAP against MS AD
         AuthType Basic
         AuthBasicProvider ldap
         # AuthLDAPURL specifies the LDAP server IP, port, base DN, scope and filter
         # using this format: ldap://host:port/basedn?attribute?scope?filter
         AuthLDAPURL "ldap://i12bretro.local:389/DC=i12bretro,DC=local?sAMAccountName?sub?(objectClass=user)" NONE
         # The LDAP bind username and password
         AuthLDAPBindDN "readonly_svc@i12bretro.local"
         AuthLDAPBindPassword "Read0nly!!"
         LDAPReferrals Off
         AuthUserFile /dev/null
         AuthName "Restricted Area [i12bretro.local]"
         # to authenticate a domain group, specify the full DN
         AuthLDAPGroupAttributeIsDN on
         require ldap-group CN=WebAuthAccess,CN=Users,DC=i12bretro,DC=local
         ≪/location≫
   06. Save httpd.conf
   07. Restart the Apache service
   08. Open a browser and navigate to the LDAP authenticated URL
   09. An authentication prompt should appear, allowing only users in the AD group specified access
 


### Connect with me and others ###
★ Discord: https://discord.com/invite/EzenvmSHW8
★ Reddit: https://reddit.com/r/i12bretro
★ Twitter: https://twitter.com/i12bretro



Other Videos By i12bretro


2020-09-24Add Debian/Ubuntu Linux Device to Windows Active Directory
2020-09-23Nintendo Wii U Boot Animation
2020-09-21Running a Windows Server 2016 VM in Virtualbox
2020-09-21Running a Windows Server 2019 VM in Virtualbox
2020-09-16Installing Armbian on Amlogic S912 Android TV Box (Nexbox A95x A2)
2020-09-14Running a Windows Server 2012 VM in Virtualbox
2020-09-14Running a Windows Server 2008 VM in Virtualbox
2020-09-09Creating and Applying SSL Certificate to Apache Guacamole
2020-09-07Running a Windows Server 2000 VM in Virtualbox
2020-09-07Running a Windows Server 2003 VM in Virtualbox
2020-09-03Setting Up LDAP Authenticated Directory in Apache HTTPD
2020-08-31Running a Linux Manjaro in Virtualbox
2020-08-31Running a Pop! OS 20 04 VM in Virtualbox
2020-08-27Enabling mod status for Monitoring Apache HTTPD
2020-08-24Running a Linux FX (Windowsfx) VM in Virtualbox
2020-08-24Running a Elementary OS VM in Virtualbox
2020-08-19Web Based VirtualBox Administration with phpVirtualbox
2020-08-17Running a Fedora Workstation VM in Virtualbox
2020-08-17Running a Linux Mint in Virtualbox
2020-08-15Enabling SSL for Pi Hole Admin Interface lighttpd UPDATED
2020-08-13Installing Batocera on S905x Android TV Box Sunvell T95x


Tags:
Active Directory
Administration
Apache
Apache HTTPD
Apache HTTPD Administration
Apache Httpd
Browser Based
Home Lab
Install Guide
LDAP
Lightweight Directory Access Protocol
Microsoft Windows
PHP
PHP Active Directory Access
PHP Active Directory Authentication
PHP LDAP
PHP LDAP Authentication
Self-Hosted
System Administrator
Web Based
Web Developer
Web Server
Web Server Administration
Web Server Customization
Windows