mirror of
				https://bitbucket.org/jsuto/piler.git
				synced 2025-11-01 00:32:27 +01:00 
			
		
		
		
	
		
			
				
	
	
		
			59 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			ApacheConf
		
	
	
	
	
	
			
		
		
	
	
			59 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			ApacheConf
		
	
	
	
	
	
| DirectoryIndex index.php
 | |
| 
 | |
| RewriteEngine On
 | |
| RewriteRule ^search.php /index.php?route=search/search&type=simple [L]
 | |
| RewriteRule ^advanced.php /index.php?route=search/search&type=advanced [L]
 | |
| RewriteRule ^expert.php /index.php?route=search/search&type=expert [L]
 | |
| RewriteRule ^search-helper.php /index.php?route=search/helper [L]
 | |
| RewriteRule ^audit-helper.php /index.php?route=audit/helper [L]
 | |
| RewriteRule ^message.php /index.php?route=message/view [L]
 | |
| RewriteRule ^bulkrestore.php /index.php?route=message/bulkrestore [L]
 | |
| RewriteRule ^bulkremove.php /index.php?route=message/bulkremove [L]
 | |
| RewriteRule ^rejectremove.php /index.php?route=message/rejectremove [L]
 | |
| RewriteRule ^bulkpdf.php /index.php?route=message/bulkpdf [L]
 | |
| RewriteRule ^folders.php /index.php?route=folder/list& [QSA,L]
 | |
| RewriteRule ^settings.php /index.php?route=user/settings [L]
 | |
| RewriteRule ^login.php /index.php?route=login/login [L]
 | |
| RewriteRule ^logout.php /index.php?route=login/logout [L]
 | |
| RewriteRule ^google.php /index.php?route=login/google [QSA,L]
 | |
| RewriteRule ^domain.php /index.php?route=domain/domain [QSA,L]
 | |
| RewriteRule ^ldap.php /index.php?route=ldap/list [QSA,L]
 | |
| RewriteRule ^customer.php /index.php?route=customer/list [QSA,L]
 | |
| RewriteRule ^retention.php /index.php?route=policy/retention [QSA,L]
 | |
| RewriteRule ^archiving.php /index.php?route=policy/archiving [QSA,L]
 | |
| RewriteRule ^legalhold.php /index.php?route=policy/legalhold [QSA,L]
 | |
| RewriteRule ^view/javascript/piler.js /js.php [QSA,L]
 | |
| 
 | |
| <IfModule auth_ntlm_winbind_module>
 | |
|    <FilesMatch "sso\.php$">
 | |
|       AuthName "piler NTLM authentication"
 | |
|       NTLMAuth on
 | |
|       NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp"
 | |
|       NTLMBasicAuthoritative on
 | |
|       AuthType NTLM
 | |
|       require valid-user
 | |
|    </FilesMatch>
 | |
| </IfModule>
 | |
| 
 | |
| <IfModule auth_gssapi_module>
 | |
|    # ktpass -princ HTTP/<webserver-fqdn>@<WINDOWS AD DOMAIN IN CAPITALS> \
 | |
|    #        -mapuser <ldap helper user>@<WINDOWS AD DOMAIN IN CAPITALS> \
 | |
|    #        -pass * \
 | |
|    #        -crypto AES256-SHA1 \
 | |
|    #        -ptype KRB5_NT_PRINCIPAL \
 | |
|    #        -out /etc/krb5/http.keytab \
 | |
|    #
 | |
|    # setspn -s HTTP/<webserver-fqdn> <ldap helper user>
 | |
| 
 | |
|    <FilesMatch "sso\.php$">
 | |
|       RewriteEngine on
 | |
|       RewriteCond %{HTTP:Authorization}  !^$
 | |
|       RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
 | |
|       AuthName "User with domain part (separated by @) in CAPITALS - e.g. 'user@DOMAIN'"
 | |
|       AuthType GSSAPI
 | |
|       GssapiBasicAuth On
 | |
|       GssapiCredStore keytab:/etc/krb5/http.keytab
 | |
|       Require valid-user
 | |
|    </FilesMatch>
 | |
| </IfModule>
 |