Apache::authSympa : a Sympa module for Apache
It's called AuthSympa and it's an Apache 2 mod_perl module. The goal is to control acces to some ressources using subscribers definition for a particular list hosted by some Sympa server. This contribution from Dominique Launay (CRU) will be included in Sympa's project in a very future release but it can be used now under GPL licence.
- ask remote sympa server to validate email+password.
- ask remote sympa server toknown if this email is registred as a list subscriber of a particular list.
The two parts of the module named Apache::AuthNSympa and Apache::AuthZSympa can be used separately for authentication and/or authorization.
Apache::AuthSympa is not one more Single Sing On method but it just avoids administrator to distribute password to users that are not referenced anywhere else than a Sympa server. Apache::AuthNSympa does not make Sympa an attribute server, it is just a simple way to base access control to a group definition.
Configuration exemple
This configuration is to be included in a apache2 httpd.conf file
AuthName SympaAuth
AuthType Basic
# URL of the sympa soap server which provides the lists
PerlSetVar SympaSoapServer http://mysympa.server/soap
#list used for authorization
PerlSetVar SympaList mylist
# authentication module
PerlAuthenHandler Apache::AuthNSympa
#authorization module
PerlAuthzHandler Apache::AuthZSympa
require valid-user
You can find the project at this url http://sourcesup.cru.fr/projects/authsympa/ and the package at this
(Please, send public discussion about this module to sympa-dev mailing list).
Subscribers of list sympa-users can acces a test page. In order to test it, use your subscriber email of list sympa-users and your password as defined in Sympa@cru.fr.
|