Require directive with groups: All Vs. Any problem.

[Jesus Climent <jesus.climent@hispalinux.es>]

Hi.

In the process of moving a service from a RedHat machine to a Debian one, we
are facing some problems with libapache2-mod-authz-ldap.

In our current installation on RedHat, a <files "*tgz" > behaves in a way that
all the "require group ..." directive have to be fullfiled. That is, a user
MUST belong to ANY the "require" groups to be able to open the file.

However, when moving to a Debian based one, the user can open the file if he
belongs to ANY of the given groups (still, the MUST belong to ANY applies).

I have checked the server configuration files, the apache2 documentation and
the only relevan part i found is the "satisfy" directive, but as i understand
it only applies to the relationship between "require <-> allow" directives
(for All and Any) and not for multiple "require" entries.

Versions are as follows:

Redhat:
 httpd-2.0.46-38.ent
 mod_authz_ldap-0.26-2

Debian sarge:
 2.0.54-5sarge1
 libapache2-mod-authz- 0.26-1

Any help is appreciated.

I am considering filling a bug, just for the sake of completion.

-- 
Jesus Climent                  info:www.pumuki.org dj:triplestereo.com
Unix SysAdm|Linux User #66350|Debian Developer|2.6.17|Helsinki Finland
GPG: 1024D/86946D69 BB64 2339 1CAA 7064 E429  7E18 66FC 1D7F 8694 6D69

Shall I make us a nice cup of tea, Ma'am ?
		--Mrs. Mills (The others)