Came across this little blog post about apache config with DoD CAC.
Worked like a champ for me with Apache2.2 and Solaris 10 X86. Now onto to user authentication and access control with this configuration.
Came across this little blog post about apache config with DoD CAC.
Worked like a champ for me with Apache2.2 and Solaris 10 X86. Now onto to user authentication and access control with this configuration.
Hi Have you figured out how to do user authentication with the above configuration?
I am working on a new post with CRL’s. This handles making sure only valid certs are allowed in. Then it is up the applications to handle the authorization. One option is use opensso, there are a few sun.com blogs I have found talking about it.
The trick is merging the SSL_CLIENT_S_DN_CN(unique to everyone) in a friendly name. For me this would have to be across applications if there isn’t an identity server running for everyone. Backend services can be written to supply common data at application registration.
Either way you would have to reach back to an Enterprise service to get “Official” information.