Differences

This shows you the differences between two versions of the page.

--- metamod:security_plans [2008-11-27 10:13:43]
heikok
+++ metamod:security_plans [2022-05-31 09:29:32] (current)
@@ Line 26: / Line 26: @@
   * //BasicAuth-apache// can be connected to LDAP via http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html
   * //BasicAuth-tomcat// can be connected to LDAP via [[http://java.sun.com/products/jndi/|JNDI]]
-  * //passwd// can be replaced with LDAP via [[http://www.saas.nsw.edu.au/solutions/ldap-auth-pam.html|PAM]]
+  * //passwd// can use LDAP via [[http://www.saas.nsw.edu.au/solutions/ldap-auth-pam.html|ldap_pam]]
   * //metamod-file// needs some development. Simplest to switch to //BasicAuth-apache//.
@@ Line 45: / Line 45: @@
   * Using tomcat within apache (mod_jk, mod_proxy), having same security realm. This would be a good solution for SSO on the http-side (simply having one application), but might require extra care when setting up protection for one data-catalog, which can be seen from apache as up to 3 (eventually more) http-pathes (opendap, http, WCS).
-==== Changes needed ====
+===== Changes needed =====
-=== BasicAuth for /upl ===
+==== BasicAuth for /upl ====
   * .htaccess protection for all /upl/* pages
@@ Line 53: / Line 53: @@
   * Only username known to metamod $_SERVER{REMOTE_USER} after login, not institution/working directory. This information should be stored in another place.
-=== (Optional) upload-area per user ===
+==== (Optional) upload-area per user ====
   * each user should have a user-directory, where he can upload files via ftp