Prérequis

Samba doit être installé en PDC et utiliser LDAP tel que décrit dans Installation de samba en PDC avec LDAP

Installation

Paquets nécessaires :

  # apt-get install ldap-account-manager apache2 libapache2-mod-php4 php4-mhash php4-mcrypt

Apache2 ne se lancera pas si apache ou apache-ssl est installé :

  # update-rc.d -f apache remove
  # update-rc.d -f apache-ssl remove

Finalement, pour lancer automatiquement apache2 au démarrage, dans /etc/default/apache2 :

  NO_START=0

Configuration

Apache 2

/etc/apache2/sites-available/ldap-account-manager :

   NameVirtualHost *:80
   NameVirtualHost *:443

   <VirtualHost *:443>
       ServerName pdc.deadbeef
       DocumentRoot /usr/share/ldap-account-manager

       SSLEngine On
       SSLCertificateFile /etc/apache2/ssl/apache.pem
       SSLCertificateKeyFile /etc/apache2/ssl/apache.pem

       <Directory /usr/share/ldap-account-manager>
           Options +FollowSymLinks
           AllowOverride All
           Order allow,deny
           Allow from all
           DirectoryIndex index.html
       </Directory>

       <Directory /var/lib/ldap-account-manager/tmp>
           Options -Indexes
       </Directory>

       <Directory /var/lib/ldap-account-manager/sess>
           Options -Indexes
           Order allow,deny
           Deny from all
       </Directory>

       <Directory /var/lib/ldap-account-manager/config>
           Options -Indexes
           Order allow,deny
           Deny from all
       </Directory>

       <Directory /usr/share/ldap-account-manager/lib>
           Options -Indexes
           <Files ~ .*>
               Order allow,deny
               Deny from all
           </Files>
           <Files ~ functions.js>
               Order allow,deny
               Allow from all
           </Files>
           <Files ~ fpdf.php>
               Order allow,deny
               Allow from all
           </Files>
       </Directory>

       <Directory /usr/share/ldap-account-manager/lib/font>
           Options -Indexes
           Order allow,deny
           Deny from all
       </Directory>

   </VirtualHost>

   <VirtualHost *:80>
       ServerName pdc.deadbeef

       SSLEngine off
       RewriteEngine On
       RewriteCond %{HTTPS} !=on
       RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [R,L]
   </VirtualHost>

/etc/apache2/ports.conf :

   Listen 80
   Listen 443

Création du certificat SSL :

   # apache2-ssl-certificate

Activation des modules apaches nécessaires :

   # a2enmod rewrite
   # a2enmod ssl

Activation du site :

   # a2ensite ldap-account-manager

Première connexion

http://pdc.deadbeef/