<?xml version="1.0" ?>
<?xml-stylesheet type="application/x-xpathscript" href="/styles/special.xps"?>
<?xml-stylesheet href="/data/www.rudedog.org/docs/styles/document.xsl" type="text/xsl" ?>
<!DOCTYPE document SYSTEM "/share/www-lib/xml/dtd/document.dtd" [
<!ENTITY authldap "<object type='program' class='module' value='auth_ldap'/>">
]>
<document title="Auth_ldap: An Authentication Module for Apache" copyyears="1999-2002">
  <image source="auth_ldap.png" description="auth_ldap" width="325" height="75"/>
<!--
  <section title="Search" id="search">
    <p>
      Use the field below to search the entire &authldap; site,
      including the mailing list archives.
    </p>
    <search config="htdig" 
	    exclude="" 
	    format="" 
	    keywords="" 
	    matchesperpage="" 
	    method="" 
	    restrict="" 
	    sort=""/>
  </section>
-->
  <section title="Introduction" id="intro">
    <p>
      &authldap; is an LDAP authentication module for 
      <link href="http://www.apache.org/">
	Apache</link>, the world's most
      popular web server. &authldap; has excellent performance, and
      supports Apache on both Unix and Windows NT. It also has support
      for LDAP over SSL, and a mode that lets Micros~1 Frontpage clients
      manage their web permissions while still using LDAP for
      authentication. 
    </p>
  </section>

  <section title="Support" id="support">
    <p>
      In addition to the <link
      href="#documentation">documentation</link>, 
      you can see old &authldap; mailing list messages in
      the <link href="/pipermail/auth_ldap/">list
      archives</link>. The mailing list itself is no longer active.
    </p>
  </section>

  <section title="News" id="news">
    <section title='Jan 9, 2006: auth_ldap 1.6.1 released' id="rel_161">
      <p>
I have finally released 1.6.1 of &authldap;. This version corrects various
bugs that have been reported on the mailing list, and also corrects one
potentially serious security bug. I recommend that all users of &authldap;
upgrade to this version. You can get it <link href="auth_ldap-1.6.1.tar.gz">here</link>, and you can also read the <link href="Changes.html">change log</link>.
      </p>
    </section>
    <section title='Jul 4, 2001: auth_ldap 1.6.0 released' id="rel_160">
      <p>
	Yes, after months and months, I have decided that it is time to
	call this release finished. Release 1.6.0 is now the official
	production version of &authldap;. You can get <link
	href="auth_ldap-1.6.0.tar.gz">here</link>, and you can also read
	the <link href="1.6/Changes.html">change log</link>.
      </p>
    </section>

    <section title="Apr 7, 2001: auth_ldap 1.5.4 released" id="rel_154">
      <p>
	This release incorporates the TLS patches from <link
	href="mailto:j.costlow@f5.com">Jeff Costlow</link>, fixes a
	small memory leak, and adds some more tweaks to the configure
	process. This will be the last release before &authldap; is
	re-released as version 1.6. Get it <link
	href="auth_ldap-1.5.4.tar.gz">here</link>.
      </p>
    </section>

    <section title="Feb 16, 2001: auth_ldap 1.5.3 released" id="rel_153">
      <p>
	This release improves on the autoconf process. In addition, some
	of the code has been changed to make &authldap; more robust when
	it is not the only auth module in Apache; there were certain
	situations where &authldap; would segfault if another
	  non-authoritative auth module was also running. Download the new
	  release <link href="auth_ldap-1.5.3.tar.gz">here</link>.
      </p>
    </section>

    <section title="Feb 7, 2001: auth_ldap 1.4.8 released" id="rel_148">
      <p>
	This release just adds support for building &authldap; as a
	static module (compiled into Apache). If you don't need to build
	&authldap; statically, you don't need this release. Get it <link
	href="auth_ldap-1.4.8.tar.gz">here</link>.
      </p>
    </section>
    <section title="Dec 12, 2000: auth_ldap 1.5.2 released" id="rel_152">
      <p>
	This release fixes the same memory leak that release 1.4.7 fixed.
	Get it <link href="auth_ldap-1.5.2.tar.gz">
	here</link>.
      </p>
    </section>

    <section title="Dec 12, 2000: auth_ldap 1.4.7 released" id="rel_147">
      <p>
	This release fixes a serious memory leak. All production users
	of &authldap; should upgrade. Get it <link href="auth_ldap-1.4.7.tar.gz">
	here</link>.
</p>
</section>

    <section title="Dec 11, 2000: auth_ldap 1.5.1 released" id="rel_151">
      <p>
	This release is the first candidate for the upcoming 1.6 version
	of &authldap;. In addition to bug fixes, major changes include
	better support for FrontPage and better compatibility with
	OpenLDAP 2. Barring any serious bug reports, the next release of
	  &authldap; will be 1.6.0. Get the latest release <link
	  href="auth_ldap-1.5.1.tar.gz">here</link>.
      </p>
    </section>

    <section title="Nov 23, 2000: auth_ldap 1.4.6 released" id="rel_146">
      <p>
	This release corrects a few outstanding problems with the
	ldap_url_parse() function in OpenLDAP 2.x. If you aren't having
	problems with LDAP URLs in your Apache configuration, then you
	don't need to upgrade. Otherwise, get the latest version <link
	href="auth_ldap-1.4.6.tar.gz">here</link>.
      </p>
    </section>

    <section title="Nov 20, 2000: New Mailing List for auth_ldap" id="mlist">
      <p>
	I have created a mailing list for &authldap;. This will be the
	primary support channel for &authldap; from now on, and
	hopefully, the 
	<link href="/pipermail/auth_ldap/">
	  archives</link> will become a useful resource for all
	  &authldap; users. You can subscribe to the mailing list from
	the list's <link href="/mailman/listinfo/auth_ldap">
	  web site</link>.
      </p>
    </section>
    <section title="Oct 27, 2000: auth_ldap 1.4.5 released" id="rel_145">
      <p>
	This release corrects some problems with certain versions of
	OpenLDAP. The behavior of the ldap_url_parse() function had
	changed, resulting in bad search scopes. Get the latest version 
	  <link href="auth_ldap-1.4.5.tar.gz">here</link> 
      </p>
    </section>

    <section title="Oct 25, 2000: auth_ldap 1.4.4 released" id="rel_144">
      <p>
	This release adds support for <link
	href="http://www.openldap.org/">OpenLDAP 2.0</link>, but doesn't
	make any other changes. Get it <link
	href="auth_ldap-1.4.4.tar.gz">here</link>. Stay tuned for a
	1.5.1 developers release, which will also support OpenLDAP 2.0,
	as well as support autoconf style configuration.
      </p>
    </section>

    <section title="July 3, 2000: First Developers Release for the Next auth_ldap Development Cycle" id="devrel">
      <p>
	I have released &authldap; 1.5.0, which is the first release of
	the new developers beta test cycle. There are a lot of changes
	in this release, including one change with the AuthLDAPCacheSize
	directive that is not backwards compatible with old auth_ldap
	configurations. The good news is that the old version and the
	new version had reasonable values for this directive, so most
	people probably do not use it in their configs. For more
	information, read the full <link href="1.5/Changes.html">change
	log</link>.
      </p>

      <p>
	This is a beta developers release only! If you are using
	&authldap; in a mission-critical production environment, you
	probably should not be using this release. If you want to assist
	with testing the next version of &authldap; please feel free to
	<link href="auth_ldap-1.5.0.tar.gz">download</link> it and give me feedback.
      </p>
    </section>

    <section title="June 18, 2000: auth_ldap 1.4.3 Released" id="rel143">
      <p>
	The only new thing in this is the beginnings of a <link
	href="1.4/FAQ.html">FAQ</link>. There is no new functionality in
	this version. <link href="auth_ldap-1.4.3.tar.gz">Download
	now!</link>
      </p>
    </section>

    <section title="April 2, 2000: auth_ldap 1.4.2 Released" id="rel142">
      <p>
	In celebration of &authldap;'s 2000th download, I decided to
	release a new version. Note that I skipped the 1.4.1 release
	because of a last minute bug I discovered after I packaged
	everything. <link href="auth_ldap-1.4.2.tar.gz">Download now!</link>
      </p>
    </section>

    <section title="September 6, 1999: auth_ldap 1.4 Released" id="rel14">
      <p>
	After months of testing, and a 3-month hiatus whilst I changed
	jobs and moved to Seattle, &authldap; 1.4 has finally
	been released. <link href="auth_ldap-1.4.0.tar.gz">Download now!</link>
      </p>

      <p>
	Here is a list of the major changes:
      </p>
      
      <list type="bullet">
	<item>
	  <p>Support for LDAP over SSL</p>
	</item>
	<item>
	  <p>LDAP caching</p>
	</item>
	<item>
	  <p>Improved NT support</p>
	</item>
	<item>
	  <p>OpenLDAP support</p>
	</item>
	<item>
	  <p>Added AuthLDAPRemoteUserIsDN directive</p>
	</item>
	<item>
	  <p>Removed AuthLDAPRedundantServers directive</p>
	</item>
	<item>
	  <p>Split source into multiple files</p>
	</item>
      </list>
    </section>
  </section>

  <section title="Requirements" id="requirements">
    <p>
      To compile &authldap;, you will need either the <link
      href="http://www.iplanet.com/downloads/developer">
	Netscape Directory SDK</link>,
      or the <link href="http://www.openldap.org/">OpenLDAP
      SDK</link>. For SSL, the Netscape SDK is required. &authldap; has
      been tested against all versions of Apache 1.3. &authldap; has not
      been tested against Apache 1.2, to my knowledge. &authldap; 1.7.x,
      the (unreleased) developers' release of &authldap; will also work
      against Apache 2.0. It's known to run on Solaris, Linux, and
      HP/UX.
    </p>
  </section>

  <section title="Documentation" id="documentation">

    <list type="bullet">
      <item>
	<p>
	  <link href="1.6/auth_ldap.html">
	    &authldap; 1.6 Documentation
	  </link>
	</p>
      </item>
      <item>
	<p>
	  <link href="1.4/auth_ldap.html">
	    The old &authldap; 1.4 Release Documentation
	  </link>
	</p>
      </item>

      <item>
	<p>
	  The <link href="1.6/FAQ.html">&authldap; FAQ</link>
	</p>
      </item>
      <item>
	<p>
	  The &authldap; 1.6 <link href="1.6/Changes.html">change log</link>
	</p>
      </item>
      <item>
	<p>
	  The &authldap; 1.4 <link href="1.4/Changes.html">old change log</link>
	</p>
      </item>
    </list>
  </section>

  <section title="Download" id="download">

    <list type="bullet">
      <item>
	<p>
	  <link href="auth_ldap-1.6.0.tar.gz">
	    Latest &authldap; 1.6 Release Source
	  </link>
	</p>
      </item>
      <item>
	<p>
	  <link href="auth_ldap-1.4.8.tar.gz">
	    The old latest &authldap; 1.4 Source
	  </link>
	</p>
      </item>
      <item>
	<p>
	  <link href="all_versions.xml">
	    Other &authldap; versions
	  </link>
	</p>
      </item>
      <item>
	<p>
	  A <link href="auth_ldap.zip">precompiled version of auth_ldap
	  for Win32</link>, courtesy of Avnish Pundir (apundir at
	  gmx.net). This has not been tested by me, since I don't have
	  access to a Win32 box.
	</p>
      </item>
    </list>
  </section>

<!--
  <section title="Take the auth_ldap Survey" id="vote">
    <p>
      <poll id="2" action="entryform"/>
    </p>
  </section>
-->

</document>
