Purpose
mod_gws is an apache module that controls access to resources based on membership in groups in the Group Service.
Compatibility
mod_gws is compatible with Shibboleth and other user authentication modules.
Components
mod_gws consists of two components:
- an Apache module that handles authorization directives
- a separate daemon process that brokers client communication with the Groups Service API v2.
This design isolates Apache request handers and prevents them from accessing the client credentials (RSA private key) used to check group memberships via the GWS REST API.
Downloads
Instructions
- Download the current stable release.
- Configure, make, and install.
- mod_gws has build dependencies on the apache development libraries and a curl development library
- The source distribution includes documentation covering:
- module configuration
- daemon configuration