Skip to content

Apache proxy with authentication or authorization based on mod_auth_openidc and mod_auth_ldap

License

BSD-3-Clause, Apache-2.0 licenses found

Licenses found

BSD-3-Clause
LICENSE.txt
Apache-2.0
LICENSE-ASL-2.0
Notifications You must be signed in to change notification settings

broadinstitute/openidc-proxy

openidc-proxy

Docker Hub Docker Hub Docker Repository on Quay

This container images extends OpenIDC BaseImage and adds several features:

  • Adds the authnz_ldap module to Apache
  • Adds a new site.conf config file
  • Adds the following configurable environment variables to use the extended functionality of the container image:
    • ALLOW_HEADERS3: The CORS headers to allow for PROXY_PATH3. Default: None
    • ALLOW_METHODS3: The CORS methods to allow for PROXY_PATH3. Default: None
    • AUTH_REQUIRE3: An OIDC claim to restrict access on PROXY_PATH3. Default: Require valid-user
    • AUTH_TYPE3: The AuthType to use for PROXY_PATH3. Default: AuthType oauth20
    • AUTH_LDAP_BIND_DN: The AuthLDAPBindDN to use for PROXY_PATH. Default: None
    • AUTH_LDAP_BIND_DN2: The AuthLDAPBindDN to use for PROXY_PATH2. Default: None
    • AUTH_LDAP_BIND_DN3: The AuthLDAPBindDN to use for PROXY_PATH3. Default: None
    • AUTH_LDAP_BIND_PASSWORD: The AuthLDAPBindPassword to use for PROXY_PATH. Default: None
    • AUTH_LDAP_BIND_PASSWORD2: The AuthLDAPBindPassword to use for PROXY_PATH2. Default: None
    • AUTH_LDAP_BIND_PASSWORD3: The AuthLDAPBindPassword to use for PROXY_PATH3. Default: None
    • AUTH_LDAP_GROUP_ATTR: The AuthLDAPGroupAttribute to use for PROXY_PATH. Default: None
    • AUTH_LDAP_GROUP_ATTR2: The AuthLDAPGroupAttribute to use for PROXY_PATH2. Default: None
    • AUTH_LDAP_GROUP_ATTR3: The AuthLDAPGroupAttribute to use for PROXY_PATH3. Default: None
    • AUTH_LDAP_URL: The AuthLDAPURL to use for PROXY_PATH. Default: None
    • AUTH_LDAP_URL2: The AuthLDAPURL to use for PROXY_PATH2. Default: None
    • AUTH_LDAP_URL3: The AuthLDAPURL to use for PROXY_PATH3. Default: None
    • ENABLE_STACKDRIVER: Set to yes to enable Stackdriver Virtual Host. Default: None
    • LDAP_CACHE_TTL: The LDAP cache timeout. Default: 60
    • PROXY_PATH3: The Apache Location to configure with OAuth2.0 authentication, which will require a valid Google token to access. Default: /register

About

Apache proxy with authentication or authorization based on mod_auth_openidc and mod_auth_ldap

Resources

License

BSD-3-Clause, Apache-2.0 licenses found

Licenses found

BSD-3-Clause
LICENSE.txt
Apache-2.0
LICENSE-ASL-2.0

Code of conduct

Stars

Watchers

Forks

Packages

No packages published

Contributors 7