Koozali.org: home of the SME Server

Restrict access od LemonLDAP::NG to internal LAN

Offline Arnaud

  • *
  • 143
  • +0/-0
    • GuedeL
Restrict access od LemonLDAP::NG to internal LAN
« on: January 07, 2017, 05:06:22 PM »
Hello,

I would like to restrict the access of both sub-domains of LemonLDAP (auth.domain.tld and sso-manager.domain.tld) to the internal LAN only.

I had a look into /etc/httpd/conf/httpd.conf and if I can understand the file in a correct way:
- subdomain "sso-manager" is already restricted to LAN (Order deny,allow //  Deny from all //  Allow from 127.0.0.1 + internal broadcast IP's)
- subdomain "auth" is accessible from "outside" (and in my case it is)

Then I would process according the wiki  https://wiki.contribs.org/Webapps-common:
Code: [Select]
db domains setprop auth.domain.tld AllowHosts 'local'

=> Is it the correct way or are there specific parameters of LemonLDAP for this purpose?

Thanks.
Bye
Arnaud

PS: I won't forget the removal of both subdomains in the external DNS too!