https://bz.apache.org/bugzilla/show_bug.cgi?id=65945
--- Comment #2 from Chris Lott <[email protected]> --- Thanks Eric for the immediate reply! I would be grateful for any scrap of information about groups. Today we use "Require ldap-group cn=myusergroup,ou=groups,dc=myproject" to authorize our users. This means we must name at least one group. And the LDAP server successfully tests for membership in that group. So if getting all groups is a non-starter due to all the complexity, how about setting an attribute with the result of a test that's just like the "Require" directive? For example, set attribute AUTHORIZE_MEMBER_myusergroup based on the test "is member of group myusergroup"? If I could test for several groups, setting a yes/no attribute for each, that would solve the problem nicely. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
