Eu aconselharia a ler a doc do apache. Os exemplos abaixo foram tirados de lá + varios testes....
apache + ldap + tls
root@zeus:~# less /etc/apache2/conf-available/contatogs-mondo.conf
<IfModule alias_module>
Alias /disaster "/srv/backup/mondo"
</IfModule>
<Directory "/srv/backup/mondo">
AllowOverride Limit AuthConfig
Options Indexes FollowSymLinks
Include /etc/apache2/ORDER.conf
<IfModule authnz_ldap_module>
Include /etc/apache2/LDAP.conf
AuthName "Acesso Restrito ao Disaster! "
Require ldap-group cn=DISASTER,ou=groups,dc=contatogs,dc=com,dc=br
</IfModule>
</Directory>
Bom estudo 80)