Annotation of wikisrc/tutorials/lighttpd_on_netbsd.mdwn, revision 1.7

1.1       sevan       1: **Contents**
                      2: 
                      3: [[!toc]]
                      4: 
1.4       schmonz     5: ## Installation
                      6: 
                      7: Via `pkgin` or `pkg_add` for platforms with binary packages available, or via pkgsrc thus:
1.1       sevan       8: 
1.2       wiki        9:     $ cd /usr/pkgsrc/www/lighttpd
                     10:     $ make install clean clean-depends
1.1       sevan      11: 
                     12: 
1.2       wiki       13: If you don’t have `PKG_RCD_SCRIPTS=yes` set, manually install the provided rc.d script:
1.4       schmonz    14: 
1.2       wiki       15:     # cp /usr/pkg/share/examples/rc.d/lighttpd /etc/rc.d
1.1       sevan      16: 
1.7     ! wiki       17: And set `lighttpd=YES` in `/etc/rc.conf`. Then start the webserver with:
1.4       schmonz    18: 
1.1       sevan      19:     /etc/rc.d/lighttpd start
                     20: 
1.4       schmonz    21: Check your logs if you encounter any problem.
                     22: 
1.1       sevan      23: 
1.5       schmonz    24: ## Adding LDAP authentication
1.1       sevan      25: 
1.4       schmonz    26: We will use OpenLdap.
1.1       sevan      27: 
1.4       schmonz    28: First of all deploy a working ldap server, and populate it with the the users. For more information on this, read [[OpenLDAP Authentication on NetBSD|tutorials/openldap_authentication_on_netbsd]].
1.1       sevan      29: 
1.5       schmonz    30: Be sure to load `mod_auth` and include the following in your `lighttpd.conf`:
1.1       sevan      31: 
                     32:     # ldap authentication
                     33:     auth.backend               = "ldap"
1.4       schmonz    34:     
1.1       sevan      35:     auth.backend.ldap.hostname = "grimnismal.local"
                     36:     auth.backend.ldap.base-dn  = "dc=grimnismal,dc=local"
                     37:     auth.backend.ldap.filter   = "(uid=$)"
1.4       schmonz    38:     
1.1       sevan      39:     auth.backend.ldap.bind-dn  = "cn=Manager,dc=grimnismal,dc=local"
                     40:     
                     41:     # passwd for bind-dn, separated for security reasons
                     42:     # contains: auth.backend.ldap.bind-pw  = "your-password"
1.2       wiki       43:     # It must NOT be world readable!
1.1       sevan      44:     #
                     45:     include "ldapsecret"
1.4       schmonz    46:     
1.1       sevan      47:     auth.require               = ( "/server-status" =>
                     48:                                    (
                     49:                                      "method"  => "basic",
                     50:                                      "realm"   => "Admin only page",
                     51:                                      "require" => "user=replaced"
                     52:                                    ),
                     53:                                    "/server-config" =>
                     54:                                    (
1.4       schmonz    55:                                      "method"  => "basic",    
1.1       sevan      56:                                      "realm"   => "Staff only page",
1.4       schmonz    57:                                      "require" => "valid-user"
1.1       sevan      58:                                    )
                     59:                                  )

CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb