> All (or most) of the shared code is in mod_ldap already. It should be > relatively easy to split mod_auth_ldap into mod_authn_ldap and > mod_authz_ldap.
Perhaps we need to go into the terminilogy that modules which have no handlers (except init, etc) or no directives are called something like 'lib_ldap' or libmod. I would certainly split N and Z in the case of ldap; as I've seen useful cases in the fields where one or the other was merged with other means; such as RSA SecurID and 'fail over' static lists in case LDAP (or evil things like fragile SideMinder) where down. Dw.
