{"id":35478,"date":"2019-10-31T22:04:33","date_gmt":"2019-10-31T19:04:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/retsepty-nginx-ldap-avtorizatsiya-s-kapchej\/"},"modified":"2019-10-31T22:04:33","modified_gmt":"2019-10-31T19:04:33","slug":"retsepty-nginx-ldap-avtorizatsiya-s-kapchej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/retsepty-nginx-ldap-avtorizatsiya-s-kapchej","title":{"rendered":"Ricette Nginx: autorizzazione LDAP con CAPTCHA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Per impostare l'autenticazione con CAPTCHA, abbiamo bisogno di <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/nginx\">nginx<\/a><\/noindex> e dei suoi plugin <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/encrypted-session-nginx-module\">encrypted-session<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/form-input-nginx-module\">form-input<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/ngx_ctpp2\">ctpp2<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/echo-nginx-module\">echo<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/ngx_http_auth_basic_ldap_module\">ldap<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/headers-more-nginx-module\">headers-more<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/nginx.org\/ru\/docs\/http\/ngx_http_auth_request_module.html\">auth_request<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RekGRpth\/set-misc-nginx-module\">set-misc<\/a><\/noindex>. (Ho fornito i link ai miei fork poich\u00e9 ho apportato alcune modifiche che non sono ancora riuscito a integrare nei repository originali. \u00c8 possibile anche utilizzare <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/rekgrpth\/nginx\">una configurazione pronta<\/a><\/noindex>.)<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nPer prima cosa, impostiamo <\/p>\n<pre><code class=\"nginx\">encrypted_session_key \"abcdefghijklmnopqrstuvwxyz123456\";<\/code><\/pre>\n<p>\nSuccessivamente, disattiviamo l'intestazione di autorizzazione <\/p>\n<pre><code class=\"nginx\">more_clear_input_headers Authorization;<\/code><\/pre>\n<p>\nOra proteggiamo tutto con l'autenticazione <\/p>\n<pre><code class=\"nginx\">auth_request \/auth;\nlocation =\/auth {\n    internal;\n    subrequest_access_phase on; # consentiamo la fase di autorizzazione nella sotto-richiesta\n    auth_request off; # non utilizzare l'autorizzazione\n    set_decode_base64 $auth_decode $cookie_auth; # decodifichiamo il cookie di autorizzazione\n    set_decrypt_session $auth_decrypt $auth_decode; # decrittiamo l'autorizzazione\n    if ($auth_decrypt = \"\") { return 401 UNAUTHORIZED; } # se non riusciamo a decrittare, significa che l'utente non \u00e8 autorizzato\n    more_set_input_headers \"Authorization: Basic $auth_decrypt\"; # sostituire l'autorizzazione con basic (per utilizzare la variabile $remote_user)\n    auth_basic_ldap_realm Auth; # attiviamo l'autorizzazione ldap\n    auth_basic_ldap_url ldap:\/\/ldap.server.com; # specifichiamo l'indirizzo\n    auth_basic_ldap_bind_dn dn.server.com; # specifichiamo il suffisso\n    echo -n OK; # utente autorizzato\n}<\/code><\/pre>\n<p>\nPer gli utenti autorizzati, mostriamo il contenuto dalla loro cartella <\/p>\n<pre><code class=\"nginx\">location \/ {\n    alias html\/$remote_user\/;\n}<\/code><\/pre>\n<p>\nE in assenza di autorizzazione mostriamo il modulo di autorizzazione con captcha <\/p>\n<pre><code class=\"nginx\">error_page 401 = @error401;\nlocation @error401 {\n    set_escape_uri $request_uri_escape $request_uri; # codifica la richiesta\n    return 303 \/login?request_uri=$request_uri_escape; # reindirizza alla pagina di login con captcha, mantenendo la richiesta\n}\nlocation =\/login {\n    default_type \"text\/html; charset=utf-8\"; # imposta il tipo\n    if ($request_method = GET) { # se si tratta solo di mostrare il modulo di login con captcha\n        template login.html.ct2; # imposta il template\n        ctpp2 on; # attiva il templating\n        set_secure_random_alphanum $csrf_random 32; # genera un csrf casuale\n        encrypted_session_expires 300; # imposta la durata del csrf a 5 minuti (5 * 60 = 300)\n        set_encrypt_session $csrf_encrypt $csrf_random; # cripta il csrf casuale\n        set_encode_base64 $csrf_encode $csrf_encrypt; # codifica il csrf criptato\n        add_header Set-Cookie \"CSRF=$csrf_encode; Max-Age=300\"; # memorizza il csrf criptato nei cookie per 5 minuti (5 * 60 = 300)\n        return 200 \"{\"csrf\":\"$csrf_random\"}\"; # restituisce json al templater\n    } # altrimenti - elabora il modulo di login con captcha\n    set_form_input $csrf_form csrf; # ottiene il csrf dal modulo\n    set_unescape_uri $csrf_unescape $csrf_form; # decodifica il csrf dal modulo\n    set_decode_base64 $csrf_decode $cookie_csrf; # decodifica il csrf dai cookie\n    set_decrypt_session $csrf_decrypt $csrf_decode; # decripta il csrf dai cookie\n    if ($csrf_decrypt != $csrf_unescape) { return 303 $request_uri; } # se il csrf dal modulo non corrisponde a quello dai cookie, reindirizza per mostrare di nuovo il modulo\n    set_form_input $captcha_form captcha; # ottiene il captcha dal modulo\n    set_unescape_uri $captcha_unescape $captcha_form; # decodifica il captcha dal modulo\n    set_md5 $captcha_md5 \"secret${captcha_unescape}${csrf_decrypt}\"; # calcola md5\n    if ($captcha_md5 != $cookie_captcha) { return 303 $request_uri; } # se l'md5 non corrisponde a quello nei cookie, reindirizza per mostrare di nuovo il modulo\n    set_form_input $username_form username; # ottiene il login dal modulo\n    set_form_input $password_form password; # ottiene la password dal modulo\n    set_unescape_uri $username_unescape $username_form; # decodifica il login dal modulo\n    set_unescape_uri $password_unescape $password_form; # decodifica la password dal modulo\n    encrypted_session_expires 2592000; # imposta la durata della sessione a 30 giorni (30 * 24 * 60 * 60 = 2592000)\n    set $username_password \"$username_unescape:$password_unescape\"; # imposta l'autenticazione di base\n    set_encode_base64 $username_password_encode $username_password; # codifica l'autenticazione di base\n    set_encrypt_session $auth_encrypt $username_password_encode; # cripta l'autenticazione di base\n    set_encode_base64 $auth_encode $auth_encrypt; # codifica l'autenticazione di base criptata\n    add_header Set-Cookie \"Auth=$auth_encode; Max-Age=2592000\"; # memorizza l'autenticazione di base criptata nei cookie per 30 giorni (30 * 24 * 60 * 60 = 2592000)\n    set $arg_request_uri_or_slash $arg_request_uri; # copia la richiesta dall'argomento\n    set_if_empty $arg_request_uri_or_slash \"\/\"; # se l'argomento non \u00e8 specificato, inizia da qui\n    set_unescape_uri $request_uri_unescape $arg_request_uri_or_slash; # decodifica la richiesta\n    return 303 $request_uri_unescape; # reindirizza alla richiesta salvata\n}<\/code><\/pre>\n<p>\nlogin.html<\/p>\n<pre><code class=\"xml\">&lt;html&gt;\n    &lt;body&gt;\n        &lt;form method=&quot;post&quot; action=&quot;&quot;&gt;\n            &lt;input type=&quot;hidden&quot; name=&quot;csrf&quot; value=&quot;&lt;TMPL_var csrf&gt;&quot; \/&gt;\n            nome utente: &lt;input type=&quot;text&quot; name=&quot;username&quot; placeholder=&quot;Inserisci nome utente...&quot; \/&gt;&lt;br \/&gt;\n            password: &lt;input type=&quot;password&quot; name=&quot;password&quot; \/&gt;&lt;br \/&gt;\n            captcha: &lt;img src=&quot;\/captcha?csrf=&lt;TMPL_var csrf&gt;&quot;\/&gt;&lt;input type=&quot;text&quot; name=&quot;captcha&quot; autocomplete=&quot;off&quot; \/&gt;&lt;br \/&gt;\n            &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;invia&quot; \/&gt;\n        &lt;input type=&quot;hidden&quot; name=&quot;trp-form-language&quot; value=&quot;it&quot;\/&gt;&lt;\/form&gt;\n    &lt;\/body&gt;\n&lt;\/html&gt;<\/code><\/pre>\n<p>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/456600\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043b\u044f \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043a\u0430\u043f\u0447\u0435\u0439 \u043d\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u0441\u0430\u043c nginx \u0438 \u0435\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u044b encrypted-session, form-input, ctpp2, echo, ldap, headers-more, auth_request, set-misc. (\u042f \u0434\u0430\u043b \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0444\u043e\u0440\u043a\u0438, \u0442.\u043a. \u0434\u0435\u043b\u0430\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u043e\u043f\u0438\u0445\u043d\u0443\u0442\u044c \u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u041c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.) \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0434\u0438\u043c encrypted_session_key &#171;abcdefghijklmnopqrstuvwxyz123456&#187;; \u0414\u0430\u043b\u044c\u0448\u0435, \u043d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35478","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043b\u044f \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043a\u0430\u043f\u0447\u0435\u0439 \u043d\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u0441\u0430\u043c nginx \u0438 \u0435\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u044b encrypted-session, form-input, ctpp2, echo, ldap, headers-more, auth_request, set-misc. (\u042f \u0434\u0430\u043b \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0444\u043e\u0440\u043a\u0438, \u0442.\u043a. \u0434\u0435\u043b\u0430\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u043e\u043f\u0438\u0445\u043d\u0443\u0442\u044c \u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u041c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.) \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0434\u0438\u043c encrypted_session_key &quot;abcdefghijklmnopqrstuvwxyz123456&quot;; \u0414\u0430\u043b\u044c\u0448\u0435, \u043d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/retsepty-nginx-ldap-avtorizatsiya-s-kapchej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u0446\u0435\u043f\u0442\u044b Nginx: LDAP \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0441 \u043a\u0430\u043f\u0447\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043b\u044f \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043a\u0430\u043f\u0447\u0435\u0439 \u043d\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u0441\u0430\u043c nginx \u0438 \u0435\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u044b encrypted-session, form-input, ctpp2, echo, ldap, headers-more, auth_request, set-misc. (\u042f \u0434\u0430\u043b \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0444\u043e\u0440\u043a\u0438, \u0442.\u043a. \u0434\u0435\u043b\u0430\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u043e\u043f\u0438\u0445\u043d\u0443\u0442\u044c \u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u041c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.) \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0434\u0438\u043c encrypted_session_key &quot;abcdefghijklmnopqrstuvwxyz123456&quot;; \u0414\u0430\u043b\u044c\u0448\u0435, \u043d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/retsepty-nginx-ldap-avtorizatsiya-s-kapchej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:04:33+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:04:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ricette Nginx: autorizzazione LDAP con CAPTCHA | ProHoster","description":"Per implementare l'autorizzazione con CAPTCHA, abbiamo bisogno di nginx e dei suoi plugin encrypted-session, form-input, ctpp2, echo, ldap, headers-more, auth_request, set-misc. (Ho fornito collegamenti ai miei fork, poich\u00e9 ho apportato alcune modifiche che non sono ancora riuscito a integrare nei repository originali. \u00c8 possibile utilizzare anche un'immagine gi\u00e0 pronta.) Iniziamo impostando la chiave encrypted_session_key \"abcdefghijklmnopqrstuvwxyz123456\"; Successivamente, disattiviamo per precauzione l'intestazione di autorizzazione.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/retsepty-nginx-ldap-avtorizatsiya-s-kapchej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0446\u0435\u043f\u0442\u044b Nginx: LDAP \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0441 \u043a\u0430\u043f\u0447\u0435\u0439 | ProHoster","og:description":"\u0414\u043b\u044f \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043a\u0430\u043f\u0447\u0435\u0439 \u043d\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u0441\u0430\u043c nginx \u0438 \u0435\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u044b encrypted-session, form-input, ctpp2, echo, ldap, headers-more, auth_request, set-misc. (\u042f \u0434\u0430\u043b \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0444\u043e\u0440\u043a\u0438, \u0442.\u043a. \u0434\u0435\u043b\u0430\u043b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u043e\u043f\u0438\u0445\u043d\u0443\u0442\u044c \u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u041c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0433\u043e\u0442\u043e\u0432\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.) \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0434\u0438\u043c encrypted_session_key &quot;abcdefghijklmnopqrstuvwxyz123456&quot;; \u0414\u0430\u043b\u044c\u0448\u0435, \u043d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a","og:url":"https:\/\/prohoster.info\/it\/blog\/administrirovanie\/retsepty-nginx-ldap-avtorizatsiya-s-kapchej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:04:33+00:00","article:modified_time":"2019-10-31T19:04:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35478","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:26:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:01:27","updated":"2026-01-21 23:26:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/35478","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=35478"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/35478\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=35478"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=35478"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=35478"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}