USE KEEWEB AS SSO HOW TO
USE KEEWEB AS SSO FULL
USE KEEWEB AS SSO MODS
USE KEEWEB AS SSO PASSWORD
USE KEEWEB AS SSO FREE

Next, create a file called config.json at the root of your website and fill it with the configuration you need from here.By supporting non-commercial organizations and open-source applications, we want to increase their security. In the index.html, find the meta tag kw-config and make sure the attribute content has a value of config.json, we'll create this file later. Not too fast, we don't want our users to go through all this jazz each time they want to access the app.

USE KEEWEB AS SSO PASSWORD

We didn't set any webdav user or password so hit OK then enter the master password and VoilГ ! Head off to your browser, and authenticate with your LDAP credentials you should see now the KeeWeb app! You can choose the webdav method by clicking More, then fill in the path to your. kdbx file yet, I recommend to create one using the Keepass 2 desktop app, and copy it inside the /webdav folder.

USE KEEWEB AS SSO HOW TO

If you don't need the user to belong to a specific group, you can find plenty of examples on how to do it on the interwebs ) : Then comes a classic location tag that checks LDAP authentication and authorization, here we make sure the user belongs to the specified LDAP group. SetEnvIf Request_URI '^/healhcheck' accessgranted=1 If you need a healthcheck URI that should not be protected by LDAP, set a variable accessgranted=1 and make sure to add Allow from env=accessgranted inside the tag that checks the LDAP authentication. RequestHeader edit Destination ^https: http: early If your Apache is behind a load-balancer, and the SSL certificate is handled by the Load-balancer, leave this. Header always set Access-Control-Allow-Credentials 'true'Д¬ustomLog '|/usr/sbin/rotatelogs -l /var/log/httpd/apache_access.log.%Y-%m-%d 86400' combinedДavLockDB '/var/www/html/webdav/DavLock' is a lockfile used by Apache for when our server will receive LOCK or UNLOCK requests to handle write-concurrency for example.

Header always set Access-Control-Allow-Methods 'GET, HEAD, POST, PUT, OPTIONS, MOVE, DELETE, COPY, LOCK, UNLOCK' Header always set Access-Control-Expose-Headers 'ETag' Header always set Access-Control-Allow-Headers 'origin, content-type, cache-control, accept, authorization, if-match, destination, overwrite' Header always set Access-Control-Allow-Origin '*' So we'll keep it outside the following location tags # According to the dev of KeeWeb, OPTIONS request must work without authorization. kdbx database file will be stored in the webdav folder of our website.

USE KEEWEB AS SSO FULL

This is my full virtual host configuration file, we assume that the. Next, we are going to write a Virtual Host for KeeWeb: Then chown -R apache.apache /var/www/html/ Sudo mv /var/www/html/keeweb-gh-pages/* /var/www/html/ & sudo rmdir /var/www/html/keeweb-gh-pages/ You should have a folder /var/www/html/keeweb-gh-pages, let's move its content to the parent folder: Sudo unzip gh-pages.zip -d /var/www/html/ Unzip it at the root of your HTTP server.

Next, we have to get the resources of the KeeWeb application:

USE KEEWEB AS SSO MODS

So let's get started by installing Apache httpd.ДЄpache on CentOS loads automatically the necessary mods that we'll use in our configuration so don't worry about that. I'll be working on CentOS 7 so some commands may vary depending on your operating system. kdbx database hosted on the same server using WebDAV protocol, and finally, we'll protect the access to the website by configuring the Apache LDAP module. We'll deploy KeeWeb on an Apache httpd web server, we'll configure KeeWeb to look for our. It uses browser cache whenever it can, so keep an eye on that when redeploying your application. kdbx database locally on the browser, so security++ ) It's basically written in HTML/CSS and JavaScript, and it's based on KeePass, so you get almost all the features of the KeePass desktop app.

KeeWeb by the amazing all know what Apache httpd and its mods are, but let's talk a little about KeeWeb ( Github repo):.

USE KEEWEB AS SSO FREE

Lucky for me (and for you), we can build what we want using the following free and open source applications: Sadly, most of the open source web-based password managers that offer self-hosting and LDAP authentication were paid. In addition to that, we needed it to be protected by an LDAP authentication and self-hosted (I personally can't trust any cloud-based password manager). Where I work, we really needed a team password manager that's kept up to date with any password that's been added by a team member.

Use keeweb as sso