Easy configuration for apache2 + mod_auth_ldap(openldap) + mod_dav.
This way you can use a directory in your www-root to serve calendars and timesheets. The only drawaback is that everybody who's got access can read/wrtie to every timesheet/calendar.
Add this to your apache configuration:
LDAPTrustedCAType BASE64_FILE
LDAPTrustedCA /etc/ldap/cert/your_certificate_file.pem
<Directory /var/www/webdav/>
Dav on
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
#ldap authentication
AuthName "LDAP uid and password required"
AuthType Basic
AuthLDAPEnabled on
AuthLDAPURL "ldaps://your.server:636/<your_base_dn>?uid?sub?"
AuthLDAPAuthoritative on
AuthLDAPBindDN uid=auth,ou=Users,dc=linops01,dc=func,dc=nl
AuthLDAPBindPassword <password of your auth user>
#AuthLDAPGroupAttribute memberUid
#AuthLDAPGroupAttributeIsDN off
#require group cn=OpsProject,ou=Groups,<your_base_dn>
require valid-user
</directory>
To allow only your ops users to acces the webdav resources uncomment the 3 fore-last lines and comment the last one. This instructs apache to check if the user is a member of the OpsProject group
When you create the directory for the calendars don't forget to make apache the owner eg for debian:
chown www-data:www-data -R /var/www/webdav
--
IvoVanDongen - 17 Oct 2005
Topic revision: r1 - 22 Dec 2008 - 13:13:29 -
IvanaCace