From: Paul Querna If this directive is set to ON, users are allowed to pass a fully
- distinguished user name as the user ID. Regardless of this setting,
- Auth_LDAP will still allow a contextless login. This directive is
- turned off by default. If a full user DN is allowed for authentication and the value of
- New in Apache 2.1, is the ability to set the various connection
- parameters to a backend server. The connection parameters are in
- the form If the Proxy directive scheme starts with the
- Directives
-
- AuthLDAPAllowDNAuth
AuthLDAPBindDN
AuthLDAPBindPassword
AuthLDAPCharsetConfig
AuthLDAPAllowDNAuth Directive
-
-
-
-Description: Allow the user to authenticate by passing a fully distinguished
-user name.
-Syntax: AuthLDAPAllowDNAuth on|off
-Default: AuthLDAPAllowDNAuth off
-Context: directory, .htaccess
-Override: AuthConfig
-Status: Extension
-Module: mod_authnz_ldap Note
- AuthLDAPRemoteUserIsDN
- is set to OFF, the value of the REMOTE_USER environment variable
- will contain the actual user name value passed in the request. If
- this directive is set to ON, the REMOTE_USER environment variable
- will always be set to the user DN retrieved from the LDAP directory.
- If a contextless user ID is required in all cases instead of a
- full DN, it is possible to retrieve the desired attribute value
- from the user object by specifying an attribute list in the
- AuthLDAPUrl
directive.AuthLDAPBindDN Directive
@@ -832,10 +800,6 @@ environment variable
the username that was passed by the client. It is turned off by
default.
-See also
-
AuthLDAPUrl Directive
@@ -891,16 +855,13 @@ environment variable
uid
.
- It's a good idea to choose an attribute that will be unique across
- all entries in the subtree you will be searching.uid
. It's a good
+ idea to choose an attribute that will be unique across all
+ entries in the subtree you will be using.key=value
.
-
-
-
-
- Parameter
- Default
- Description
- min
- 0
- Minumum number of connections that will always
- be open to the backend server.
- max
- 1...n
- Hard Maximum number of connections that will be
- allowed to the backend server. The default for a Hard Maximum
- for the number of connections is the number of threads per process in the
- active MPM. In the Prefork MPM, this is always 1, while with the Worker MPM
- it is controlled by the ThreadsPerChild
.
- Apache will never create more than the Hard Maximum connections
- to the backend server.
- smax
- max
- Upto the Soft Maximum
- number of connections will be created on demand. Any connections above
- smax
are subject to a time to live or ttl
.
-
- ttl
- -
- Time To Live for the inactive connections above the
- smax
connections in seconds. Apache will close all
- connections that has not been used inside that time period.
-
- timeout
-
- Timeout
Connection timeout in seconds.
- If not set the Apache will wait until the free connection
- is available. This directive is used for limiting the number
- of connections to the backend server together with max
- parameter.
-
- acquire
- -
- If set this will be the maximum time to wait for a free
- connection in the connection pool. If there are no free connections
- in the pool the Apache will return SERVER_BUSY
status to
- the client.
-
- keepalive
- Off
- This parameter should be used when you have a firewall between your
- Apache and the backend server, who tend to drop inactive connections.
- This flag will tell the Operating System to send KEEP_ALIVE
- messages on inactive connections (interval depends on global OS settings,
- generally 120ms), and thus prevent the firewall to drop the connection.
- To enable keepalive set this property value to On
.
-
- retry
- 60
- Connection pool worker retry timeout in seconds.
- If the connection pool worker to the backend server is in the error state,
- Apache will not forward any requests to that server until the timeout
- expires. This enables to shut down the backend server for maintenance,
- and bring it back online later.
-
- loadfactor
- 1
- Worker load factor. Used with BalancerMember.
- It is a number between 1 and 100 and defines the normalized weighted
- load applied to the worker.
-
- route
- -
- Route of the worker when used inside load balancer.
- The route is a value appended to seesion id.
-
-
- redirect
- -
- Redirection Route of the worker. This value is usually
- set dynamically to enable safe removal of the node from
- the cluster. If set all requests without session id will be
- redirected to the BalancerMember that has route parametar
- equal as this value.
- balancer://
then a virtual worker that does not really
- communicate with the backend server will be created. Instead it is responsible
- for the management of several "real" workers. In that case the special set of
- parameters can be add to this virtual worker.
-
-
-
- Parameter
- Default
- Description
- lbmethod
- -
- Balancer load-balance method. Select the load-balancing scheduler
- method to use. Either requests
, to perform weighted
- request counting or traffic
, to perform weighted
- traffic byte count balancing. Default is requests
.
-
- stickysession
- -
- Balancer sticky session name. The value is usually set to something
- like JSESSIONID
or PHPSESSIONID
,
- and it depends on the backend application server that support sessions.
-
- nofailover
- Off
- If set to On
the session will break if the worker is in
- error state or disabled. Set this value to On if backend servers do not
- support session replication.
-
- timeout
- 0
- Balancer timeout in seconds. If set this will be the maximum time
- to wait for a free worker. Default is not to wait.
-
-
- maxattempts
- 1
- Maximum number of failover attempts before giving up.
-
- <Proxy balancer://mycluster stickysession=jsessionid nofailover=On>
-
- BalancerMember http://1.2.3.4:8009
- BalancerMember http://1.2.3.5:8009
- BalancerMember http://1.2.3.6:8009
-
- </Proxy>
-
ProxyRequests
directive should
+ usually be set off when using
+ ProxyPass
.Suppose the local server has address http://example.com/
;
then
Parameter | +Default | +Description |
---|---|---|
min | +0 | +Minumum number of connections that will always + be open to the backend server. |
max | +1...n | +Hard Maximum number of connections that will be
+ allowed to the backend server. The default for a Hard Maximum
+ for the number of connections is the number of threads per process in the
+ active MPM. In the Prefork MPM, this is always 1, while with the Worker MPM
+ it is controlled by the ThreadsPerChild .
+ Apache will never create more than the Hard Maximum connections
+ to the backend server. |
smax | +max | +Upto the Soft Maximum
+ number of connections will be created on demand. Any connections above
+ smax are subject to a time to live or ttl .
+ |
ttl | +- | +Time To Live for the inactive connections above the
+ smax connections in seconds. Apache will close all
+ connections that has not been used inside that time period.
+ |
timeout | +Timeout |
+ Connection timeout in seconds.
+ If not set the Apache will wait until the free connection
+ is available. This directive is used for limiting the number
+ of connections to the backend server together with max
+ parameter.
+ |
acquire | +- | +If set this will be the maximum time to wait for a free
+ connection in the connection pool. If there are no free connections
+ in the pool the Apache will return SERVER_BUSY status to
+ the client.
+ |
keepalive | +Off | +This parameter should be used when you have a firewall between your
+ Apache and the backend server, who tend to drop inactive connections.
+ This flag will tell the Operating System to send KEEP_ALIVE
+ messages on inactive connections (interval depends on global OS settings,
+ generally 120ms), and thus prevent the firewall to drop the connection.
+ To enable keepalive set this property value to On .
+ |
retry | +60 | +Connection pool worker retry timeout in seconds. + If the connection pool worker to the backend server is in the error state, + Apache will not forward any requests to that server until the timeout + expires. This enables to shut down the backend server for maintenance, + and bring it back online later. + |
loadfactor | +1 | +Worker load factor. Used with BalancerMember. + It is a number between 1 and 100 and defines the normalized weighted + load applied to the worker. + |
route | +- | +Route of the worker when used inside load balancer. + The route is a value appended to seesion id. + |
redirect | +- | +Redirection Route of the worker. This value is usually + set dynamically to enable safe removal of the node from + the cluster. If set all requests without session id will be + redirected to the BalancerMember that has route parametar + equal as this value. + |
If the Proxy directive scheme starts with the
+ balancer://
then a virtual worker that does not really
+ communicate with the backend server will be created. Instead it is responsible
+ for the management of several "real" workers. In that case the special set of
+ parameters can be add to this virtual worker.
+
Parameter | +Default | +Description |
---|---|---|
lbmethod | +- | +Balancer load-balance method. Select the load-balancing scheduler
+ method to use. Either requests , to perform weighted
+ request counting or traffic , to perform weighted
+ traffic byte count balancing. Default is requests .
+ |
stickysession | +- | +Balancer sticky session name. The value is usually set to something
+ like JSESSIONID or PHPSESSIONID ,
+ and it depends on the backend application server that support sessions.
+ |
nofailover | +Off | +If set to On the session will break if the worker is in
+ error state or disabled. Set this value to On if backend servers do not
+ support session replication.
+ |
timeout | +0 | +Balancer timeout in seconds. If set this will be the maximum time + to wait for a free worker. Default is not to wait. + |
maxattempts | +1 | +Maximum number of failover attempts before giving up. + |
+ ProxyPass /special-area http://special.example.com/ smax=5 max=10
+ ProxyPass / balancer://mycluster stickysession=jsessionid nofailover=On
+ <Proxy balancer://mycluster>
+
+ BalancerMember http://1.2.3.4:8009
+ BalancerMember http://1.2.3.5:8009 smax=10
+ # Less powerful server, don't send as many requests there
+ BalancerMember http://1.2.3.6:8009 smax=1 loadfactor=20
+
+ </Proxy>
+
When used inside a <Location>
section, the first argument is omitted and the local
directory is obtained from the <Location>
.
ProxyRequests
directive should
- usually be set off when using
- ProxyPass
.If you require a more flexible reverse-proxy configuration, see the
RewriteRule
directive with the
[P]
flag.