Authenticating Apache website against WIN SERVER 2008 Active Directory











up vote
0
down vote

favorite












I have a quick question, maybe a noob one :D



I currently have Windows server 2008 running on one of my servers, that server is the Domain Controller, running active directory with all the users.



My second server is running Ubuntu and it will be the Apache server.



The website I am creating will have login system, which will use users from the Windows Active Directory.



Question is, how do I make the Apache server see the users from the windows AD? Do I need to run Samba and synchronise the users so I can get my PHP script to pick up the users from Samba AD? If yes, then how do I synchronise that since I never used Samba before.



Any suggestions are welcome!



This is the first time working on a project like this, so I'm a bit lost, sorry if its a new question!



Thanks :)










share|improve this question






















  • more apache topic. AD is just like any LDAP. check here: httpd.apache.org/docs/2.4/howto/auth.html
    – TiloBunt
    Nov 26 at 2:04















up vote
0
down vote

favorite












I have a quick question, maybe a noob one :D



I currently have Windows server 2008 running on one of my servers, that server is the Domain Controller, running active directory with all the users.



My second server is running Ubuntu and it will be the Apache server.



The website I am creating will have login system, which will use users from the Windows Active Directory.



Question is, how do I make the Apache server see the users from the windows AD? Do I need to run Samba and synchronise the users so I can get my PHP script to pick up the users from Samba AD? If yes, then how do I synchronise that since I never used Samba before.



Any suggestions are welcome!



This is the first time working on a project like this, so I'm a bit lost, sorry if its a new question!



Thanks :)










share|improve this question






















  • more apache topic. AD is just like any LDAP. check here: httpd.apache.org/docs/2.4/howto/auth.html
    – TiloBunt
    Nov 26 at 2:04













up vote
0
down vote

favorite









up vote
0
down vote

favorite











I have a quick question, maybe a noob one :D



I currently have Windows server 2008 running on one of my servers, that server is the Domain Controller, running active directory with all the users.



My second server is running Ubuntu and it will be the Apache server.



The website I am creating will have login system, which will use users from the Windows Active Directory.



Question is, how do I make the Apache server see the users from the windows AD? Do I need to run Samba and synchronise the users so I can get my PHP script to pick up the users from Samba AD? If yes, then how do I synchronise that since I never used Samba before.



Any suggestions are welcome!



This is the first time working on a project like this, so I'm a bit lost, sorry if its a new question!



Thanks :)










share|improve this question













I have a quick question, maybe a noob one :D



I currently have Windows server 2008 running on one of my servers, that server is the Domain Controller, running active directory with all the users.



My second server is running Ubuntu and it will be the Apache server.



The website I am creating will have login system, which will use users from the Windows Active Directory.



Question is, how do I make the Apache server see the users from the windows AD? Do I need to run Samba and synchronise the users so I can get my PHP script to pick up the users from Samba AD? If yes, then how do I synchronise that since I never used Samba before.



Any suggestions are welcome!



This is the first time working on a project like this, so I'm a bit lost, sorry if its a new question!



Thanks :)







networking server windows apache2 samba






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 26 at 0:47









Mateusz Kolacki

11




11












  • more apache topic. AD is just like any LDAP. check here: httpd.apache.org/docs/2.4/howto/auth.html
    – TiloBunt
    Nov 26 at 2:04


















  • more apache topic. AD is just like any LDAP. check here: httpd.apache.org/docs/2.4/howto/auth.html
    – TiloBunt
    Nov 26 at 2:04
















more apache topic. AD is just like any LDAP. check here: httpd.apache.org/docs/2.4/howto/auth.html
– TiloBunt
Nov 26 at 2:04




more apache topic. AD is just like any LDAP. check here: httpd.apache.org/docs/2.4/howto/auth.html
– TiloBunt
Nov 26 at 2:04










1 Answer
1






active

oldest

votes

















up vote
0
down vote













This is something that really should be handled at the application level and not at the server level (it makes testing, easier), without knowing the language your using you can existing libraries to connect to active directory to auth your users or roll your own, you can see me getting berated over my code on code review (just go through my profile) to get an idea (its in php)






share|improve this answer





















    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "89"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1096043%2fauthenticating-apache-website-against-win-server-2008-active-directory%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    This is something that really should be handled at the application level and not at the server level (it makes testing, easier), without knowing the language your using you can existing libraries to connect to active directory to auth your users or roll your own, you can see me getting berated over my code on code review (just go through my profile) to get an idea (its in php)






    share|improve this answer

























      up vote
      0
      down vote













      This is something that really should be handled at the application level and not at the server level (it makes testing, easier), without knowing the language your using you can existing libraries to connect to active directory to auth your users or roll your own, you can see me getting berated over my code on code review (just go through my profile) to get an idea (its in php)






      share|improve this answer























        up vote
        0
        down vote










        up vote
        0
        down vote









        This is something that really should be handled at the application level and not at the server level (it makes testing, easier), without knowing the language your using you can existing libraries to connect to active directory to auth your users or roll your own, you can see me getting berated over my code on code review (just go through my profile) to get an idea (its in php)






        share|improve this answer












        This is something that really should be handled at the application level and not at the server level (it makes testing, easier), without knowing the language your using you can existing libraries to connect to active directory to auth your users or roll your own, you can see me getting berated over my code on code review (just go through my profile) to get an idea (its in php)







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Dec 3 at 9:53









        Dan

        516316




        516316






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Ask Ubuntu!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1096043%2fauthenticating-apache-website-against-win-server-2008-active-directory%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            How to change which sound is reproduced for terminal bell?

            Can I use Tabulator js library in my java Spring + Thymeleaf project?

            Title Spacing in Bjornstrup Chapter, Removing Chapter Number From Contents