Apache and LDAP
Nov 4th, 2005 by Karen
Now that we have our blog server running, I’ve been thinking about how to protect the blogs that are for internal use. One possible solution would be to use the Movable Type Plugin, MT Protect. However, I really want to try and leverage exisiting authentication information rather than making people remember another password. So I’ve been looking into how to use LDAP with Apache for authentication purposes. There seems to be a module for this called auth_ldap in Apache 1.3 and mod_auth_ldap in Apache 2.0. Since I’ve never added modules to Apache just turned them on in httpd.conf, I’m learning that I can add in the modules using apxs - APache eXtenSion tool (there is a good document about this at http://www.osxfaq.com/man/8/apxs.ws) or I can recompile Apache with the modules I want. Talking to the Head of Computer and Networking Systems about why one is better than the other it seems that the apxs method might result in less overhead on the server. Plus it is simpler, that is if you already have the module .so file you need to do the install. If you don’t, well then, it looks to me like it is equally complex/frightening as recompiling Apache with the desired module.
Once I get this module installed I need to figure out what lines I need to add in my Apache configuration files to make it work properly. I’m thinking about installing and testing it out on my Mac first before configuring Apache with the proper modules on our Linux test box. That way I’ll get to have the adventure of trying to add it in myself. Luckily I have a reinstall disc and keep all my files on the Libraries file server so if I managed to serious mess up my Mac all will not be lost. As my dad would say, nothing ventured nothing gain though! All of this is a real learning experience for me and has definitely helped me to improve my skill set. Therefore, as frustrating as it may be at times, it is worth it because very little bit I learn allow me to do more creative and innovative things.


Hi, I’ve been browsing, looking for information on getting Movable type to authenticate using LDAP and found your page. Can you tell me if you managed to get Movable tyep to authenticate using LDAP,
Thanks a million!
Jamie