Annotation of wikisrc/tutorials/lighttpd_on_netbsd.mdwn, revision 1.6

1.1       sevan       1: **Contents**
                      2: 
                      3: [[!toc]]
                      4: 
1.4       schmonz     5: ## Installation
                      6: 
                      7: Via `pkgin` or `pkg_add` for platforms with binary packages available, or via pkgsrc thus:
1.1       sevan       8: 
1.2       wiki        9:     $ cd /usr/pkgsrc/www/lighttpd
                     10:     $ make install clean clean-depends
1.1       sevan      11: 
                     12: 
1.2       wiki       13: If you don’t have `PKG_RCD_SCRIPTS=yes` set, manually install the provided rc.d script:
1.4       schmonz    14: 
1.2       wiki       15:     # cp /usr/pkg/share/examples/rc.d/lighttpd /etc/rc.d
1.1       sevan      16: 
1.2       wiki       17: And set `lighttpd=YES` in `/etc/rc.conf`.
1.1       sevan      18: 
                     19: 
1.4       schmonz    20: ## Configuration
                     21: 
1.6     ! schmonz    22: If using `mod_webdav`, consider setting
1.4       schmonz    23: 
1.6     ! schmonz    24:     server.stat-cache-engine = "kqueue"
1.1       sevan      25: 
                     26: 
1.4       schmonz    27: ## Testing the setup
                     28: 
                     29: You can start the webserver with:
                     30: 
1.1       sevan      31:     /etc/rc.d/lighttpd start
                     32: 
1.4       schmonz    33: Check your logs if you encounter any problem.
                     34: 
1.1       sevan      35: 
1.5       schmonz    36: ## Adding LDAP authentication
1.1       sevan      37: 
1.4       schmonz    38: We will use OpenLdap.
1.1       sevan      39: 
1.4       schmonz    40: First of all deploy a working ldap server, and populate it with the the users. For more information on this, read [[OpenLDAP Authentication on NetBSD|tutorials/openldap_authentication_on_netbsd]].
1.1       sevan      41: 
1.5       schmonz    42: Be sure to load `mod_auth` and include the following in your `lighttpd.conf`:
1.1       sevan      43: 
                     44:     # ldap authentication
                     45:     auth.backend               = "ldap"
1.4       schmonz    46:     
1.1       sevan      47:     auth.backend.ldap.hostname = "grimnismal.local"
                     48:     auth.backend.ldap.base-dn  = "dc=grimnismal,dc=local"
                     49:     auth.backend.ldap.filter   = "(uid=$)"
1.4       schmonz    50:     
1.1       sevan      51:     auth.backend.ldap.bind-dn  = "cn=Manager,dc=grimnismal,dc=local"
                     52:     
                     53:     # passwd for bind-dn, separated for security reasons
                     54:     # contains: auth.backend.ldap.bind-pw  = "your-password"
1.2       wiki       55:     # It must NOT be world readable!
1.1       sevan      56:     #
                     57:     include "ldapsecret"
1.4       schmonz    58:     
1.1       sevan      59:     auth.require               = ( "/server-status" =>
                     60:                                    (
                     61:                                      "method"  => "basic",
                     62:                                      "realm"   => "Admin only page",
                     63:                                      "require" => "user=replaced"
                     64:                                    ),
                     65:                                    "/server-config" =>
                     66:                                    (
1.4       schmonz    67:                                      "method"  => "basic",    
1.1       sevan      68:                                      "realm"   => "Staff only page",
1.4       schmonz    69:                                      "require" => "valid-user"
1.1       sevan      70:                                    )
                     71:                                  )

CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb