CODEWITHSUNDEEP
apachetomcatactive-directoryldap
Lance
Lance

Reputation:

Apache/Tomcat - LDAP Authentication based on AD Group Membership

We currently have an Apache/Tomcat (5.5) application running and we're using the LDAP authentication feature (by configuring the realm) against a multi domain structure and it's working great. One thing we would like to do is limit access to users based on their membership on a specific group in AD. Basically, only users of GroupA will be alowed to access the app. I'm wondering if this type of configuration is possible. If so, can you point me in the right direction? Thanks in advance.

Upvotes: 2

Views: 6359

Answers (2)

l_39217_l
l_39217_l

Reputation: 2110

implement your own realm

http://tomcat.apache.org/tomcat-5.5-doc/realm-howto.html

Upvotes: 2

vinny
vinny

Reputation: 1810

I believe you can accomplish this with the mod_authnz_ldap module in apache:

http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html#reqgroup

Upvotes: 1

Related Questions