[Chugalug] Access Control for LAMP

Eric Wolf ebwolf at gmail.com
Fri Oct 5 16:58:40 UTC 2012


OMG! An honest-to-goodness Linux related post to CHUGALUG!

A client of mine has a series of LAMP applications running on the same
server. They currently manage access control through separate htaccess
files and giving out the URLs on a per customer basis.

I need to implement a unified login across all their apps but it would be
nice to not have to modify a bunch of code. Ideally, the system would have
a central username/password (maybe even OpenID) and present a menu of apps
available to that user. Access to the other apps not available to the user
would be restricted even if the user worked out the URL.

The solution needs to pass basic security audits by IT flunkies at
reasonably large non-tech companies.

Any thoughts? Tricks? Etc?

-Eric

-=--=---=----=----=---=--=-=--=---=----=---=--=-=-
Eric B. Wolf                           720-334-7734
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://chugalug.org/pipermail/chugalug/attachments/20121005/41dd6798/attachment-0001.html>


More information about the Chugalug mailing list