Bug#397774: apache2.2-common: Support mod_auth_ldap to mod_aunthz_ldap migration. Or at least warn!

[Markus Hochholdinger <Markus@hochholdinger.net>]

Hi,

i also stumbled over this apache ldap feature. "require valid-user" only works 
if you set "AuthzLDAPAuthoritative off" (found in 
http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html.en#reqvaliduser).

So my solutions looks as follows:
<Directory /xxx>
        AuthName "Password"

        AuthType Basic
        AuthBasicProvider ldap

        AuthLDAPUrl ldap://127.0.0.1:389/dc=dom,dc=com?uid?sub?(objectClass=*)
        AuthLDAPBindDN searchdn
        AuthLDAPBindPassword xxxx

        AuthzLDAPAuthoritative off
        require valid-user
</Directory>

Alternative you can use "require ldap-user thisuser onotheruser". require 
ldap-user without a username doesn't work!


-- 
greetings

eMHa

Attachment: pgpOF4meZdy5b.pgp
Description: PGP signature