I've got cosign working well with kerberos, but I wanted to add an ldap
attribute to specifically (dis)allow kerberos users to login to cosign
webpages (as opposed to just getting tickets for non-web apps, which I
also use krb5 for), but I can't seem to make it work. Is there a way to
get verbose logging to see where it's failing? As soon as I uncomment
either of these checks, apache gives me a 401 Authorization Required error.
<Location /beta>
CosignProtected On
AuthType Cosign
AuthLDAPURL
"ldaps://example.com/ou=beta,cn=krbcontainer,o=example?exampleUsername"
# Require ldap-attribute exampleEnableWebLogin=TRUE
# Require ldap-user checker
</Location>
Thanks,
Chris
------------------------------------------------------------------------------
Get your Android app more play: Bring it to the BlackBerry PlayBook
in minutes. BlackBerry App World™ now supports Android™ Apps
for the BlackBerry® PlayBook™. Discover just how easy and simple
it is! http://p.sf.net/sfu/android-dev2dev
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
