Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
nginx config and simple SSO
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Naib
Watchman
Watchman


Joined: 21 May 2004
Posts: 5585
Location: Removed by Neddy

PostPosted: Mon Aug 20, 2018 10:13 pm    Post subject: nginx config and simple SSO Reply with quote

I have a number of testbed wiki pages at work (dokuwiki) and a problem reporting system (mantisbt) on a machine I administrate that is used as a simulation workhorse...
What I would like to do is make use of the $remote_user variable within nginx.conf to permit accessing an nginx location


Code:
   location /cow {
                # if ($remote_user not in cow_sso) {
                #     return 444;
                # }

      index doku.php;
      return 301 http://$host/barn/cow/doku.php;
      }


Take for instance the above test location /cow (which is a dokuwiki animal), if the $remote_user was part of a whitelist they would be able to see the site.
This is part of an intranet so $remote_user has already (to a degree) been validated. NOTE this isn't for security-based access as this is then covered later on via actual accounts.

Essentially this is a stop-gap until a request for an LDAP BIND password is approved while making a service available to a shortlist of people without "yet another username"
_________________
The best argument against democracy is a five-minute conversation with the average voter
Great Britain is a republic, with a hereditary president, while the United States is a monarchy with an elective king
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum