apache需要用户正则表达式

时间:2015-03-25 14:02:52

标签: linux apache ssl kerberos

我在apache中使用SSL和kerberos身份验证,并希望将此变量%{SSL_CLIENT_S_DN_CN}s传递给Require user

  SSLVerifyClient require
  SSLVerifyDepth 2
  SSLOptions +StdEnvVars
  SSLUserName SSL_CLIENT_S_DN_CN
  SSLRequire (%{SSL_CLIENT_S_DN_CN} in {"krisdigitx","usera"})
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate On
  KrbMethodK5Passwd On
  KrbAuthRealms MYDOMAIN.COM
  Krb5KeyTab /etc/security/keytabs/spnego.service.keytab
  Require user "%{SSL_CLIENT_S_DN_CN}s"+"@MYDOMAIN.com"
  #require valid-user

任何想法我怎么能这样做?上面的那个不起作用....

0 个答案:

没有答案