File:  [NetBSD Developer Wiki] / wikisrc / tutorials / lighttpd_on_netbsd.mdwn
Revision 1.5: download - view: text, annotated - select for diffs
Mon Nov 30 18:59:31 2020 UTC (10 months, 2 weeks ago) by schmonz
Branches: MAIN
CVS tags: HEAD
Just regular high performance going on here.

    1: **Contents**
    2: 
    3: [[!toc]]
    4: 
    5: ## Installation
    6: 
    7: Via `pkgin` or `pkg_add` for platforms with binary packages available, or via pkgsrc thus:
    8: 
    9:     $ cd /usr/pkgsrc/www/lighttpd
   10:     $ make install clean clean-depends
   11: 
   12: 
   13: If you don’t have `PKG_RCD_SCRIPTS=yes` set, manually install the provided rc.d script:
   14: 
   15:     # cp /usr/pkg/share/examples/rc.d/lighttpd /etc/rc.d
   16: 
   17: And set `lighttpd=YES` in `/etc/rc.conf`.
   18: 
   19: 
   20: ## Configuration
   21: 
   22: Enable kqueue:
   23: 
   24:     server.event-handler        = "kqueue"
   25:     server.stat-cache-engine    = "kqueue"
   26: 
   27: 
   28: ## Testing the setup
   29: 
   30: You can start the webserver with:
   31: 
   32:     /etc/rc.d/lighttpd start
   33: 
   34: Check your logs if you encounter any problem.
   35: 
   36: 
   37: ## Adding LDAP authentication
   38: 
   39: We will use OpenLdap.
   40: 
   41: First of all deploy a working ldap server, and populate it with the the users. For more information on this, read [[OpenLDAP Authentication on NetBSD|tutorials/openldap_authentication_on_netbsd]].
   42: 
   43: Be sure to load `mod_auth` and include the following in your `lighttpd.conf`:
   44: 
   45:     # ldap authentication
   46:     auth.backend               = "ldap"
   47:     
   48:     auth.backend.ldap.hostname = "grimnismal.local"
   49:     auth.backend.ldap.base-dn  = "dc=grimnismal,dc=local"
   50:     auth.backend.ldap.filter   = "(uid=$)"
   51:     
   52:     auth.backend.ldap.bind-dn  = "cn=Manager,dc=grimnismal,dc=local"
   53:     
   54:     # passwd for bind-dn, separated for security reasons
   55:     # contains: auth.backend.ldap.bind-pw  = "your-password"
   56:     # It must NOT be world readable!
   57:     #
   58:     include "ldapsecret"
   59:     
   60:     auth.require               = ( "/server-status" =>
   61:                                    (
   62:                                      "method"  => "basic",
   63:                                      "realm"   => "Admin only page",
   64:                                      "require" => "user=replaced"
   65:                                    ),
   66:                                    "/server-config" =>
   67:                                    (
   68:                                      "method"  => "basic",    
   69:                                      "realm"   => "Staff only page",
   70:                                      "require" => "valid-user"
   71:                                    )
   72:                                  )

CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb