[Auth_ldap] require group

Andy Rabagliati andyr at wizzy.com
Wed Aug 31 10:22:35 PDT 2005


Folks,

  It seems this module should do what I need ..

  I downgraded to apache 1.3 to make the module - did I need to do this ?

  Running on a redhattish server.

  In httpd.conf :-

  	    AllowOverride AuthConfig
  
  Do I need more ?

  In .htaccess :-

#################################################
AuthName                        "User Administration"
AuthType                        basic
AuthLDAPAuthoritative           on
AuthLDAPGroupAttribute          memberUid
AuthLDAPGroupAttributeIsDN      off
AuthLDAPRemoteUserIsDN          on
AuthLDAPUrl	ldap:///ou=wizzy?uid?sub?objectClass=posixAccount

require group cn=useradmin,ou=Group,dc=megabook,ou=wizzy

#################################################

  I cannot get the "require group" to work. If I look at the ldap logs,
  it searches for, and binds, to uid=fred, but never does a group
  search.

  "require valid-user" works fine.

  Any ideas ?

Cheers,  Andy!


  In ldap :-

# useradmin, Group, megabook, wizzy
dn: cn=useradmin,ou=Group,dc=megabook,ou=wizzy
gidNumber: 111
objectClass: top
objectClass: posixGroup
cn: useradmin
description: Users NL Add or Delete
memberUid: fred

# fred, People, megabook, wizzy
dn: uid=fred,ou=People,dc=megabook,ou=wizzy
objectClass: account
objectClass: posixAccount
objectClass: wizzyMailbox
cn: Fred Fish
uid: fred
uidNumber: 1007
gidNumber: 100
homeDirectory: /nfs/home/fred
mailDirectory: /var/spool/mail/fred
userPassword:: dGVzdGluZw==





More information about the Auth_ldap mailing list