Hi, i also stumbled over this apache ldap feature. "require valid-user" only works if you set "AuthzLDAPAuthoritative off" (found in http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html.en#reqvaliduser).
So my solutions looks as follows: <Directory /xxx> AuthName "Password" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl ldap://127.0.0.1:389/dc=dom,dc=com?uid?sub?(objectClass=*) AuthLDAPBindDN searchdn AuthLDAPBindPassword xxxx AuthzLDAPAuthoritative off require valid-user </Directory> Alternative you can use "require ldap-user thisuser onotheruser". require ldap-user without a username doesn't work! -- greetings eMHa
pgpKIY8KIWuqJ.pgp
Description: PGP signature