ApacheAuthDBD plugin for GLPI V 0.84.1.0

glpi-apacheauthdbd-0.84_1.0.zip   Sábado, 04 de Enero de 2014 08:50:25
+0100
operation

GLPI stores passwords encrypted so SHA1 format as hexadecimal string of
40 characters ( php function SHA1 ) .
Apache has authentication able to read a MySQL database and supports the
SHA1 module format . However , Apache expects SHA1 binary format , as a
string of 20 characters. In addition, the string must be in Base64
format.

This plugin does the following :

SHA1 password in hexadecimal format is converted to binary by a command
php pack () .
The password is encoded in base64 by a command php base64_encode ().
The password is prefixed with { SHA } chain to allow Apache to identify
the encoding.

Passwords in the format " Apache" are stored in an additional table.
To install the plugin, passwords present in the database are converted.
When the user updates their password , the "compatible" version of
Apache is too. When a user is deleted, the "compatible" version of
Apache is too.

Apache module mod_authn_dbd must be enabled on the server: a2enmod
mod_authn_dbd .
You must create a user in MySQL having only read permission on the table
glpi_plugin_authapachedbd_users .
Exemple de configuration Apache¶

DBDriver mysql
DBDParams "host=localhost port=3306 dbname=dbglpi user=userglpi
pass=passdbglpi"
DBDExptime 300
DBDMin 1
DBDMax 10

<Directory "/var/www/web">
AuthType basic
AuthName "Registered User"
AuthBasicProvider dbd
AuthDBDUserPWQuery "SELECT glpi_plugin_apacheauthdbd_users.password FROM
glpi_plugin_apacheauthdbd_users INNER JOIN glpi_users ON (glpi_users.id
= glpi_plugin_apacheauthdbd_users.users_id AND glpi_users.is_active=1)
WHERE glpi_users.name=%s AND glpi_plugin_apacheauthdbd_users.auth=1"
Require valid-user
</Directory>