Apache Module for Groups Authorization (mod_gws)

Purpose

mod_gws is an apache module that controls access to resources based on membership in groups in the Group Service.

Compatibility

mod_gws is compatible with Shibboleth and other user authentication modules.

Components

mod_gws consists of two components:

• an Apache module that handles authorization directives
• a separate daemon process that brokers client communication with the Groups Service API v2.

This design isolates Apache request handers and prevents them from accessing the client credentials (RSA private key) used to check group memberships via the GWS REST API.

Downloads

Instructions

1. Download the current stable release.
2. Configure, make, and install.
   • mod_gws has build dependencies on the apache development libraries and a curl development library
3. The source distribution includes documentation covering:
   • module configuration
   • daemon configuration