-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

| MOROZZO Valerio wrote:
|
|> Customer asked me to protect via basic-authentication/mod_ldap a site,
|> where users that can access have to be validated into two different
|> ldap repository depending on the user type:
|>


Rather, it sounds instead like you might want to use some more complex
authentication than provided natively by Apache.

In this case, I suggest routing your apache authentication into the pam
subsystem, where you can set up all kinds of crazy things:

Here's a google search to get you started.

http://www.google.com/search?q=apache+auth+pam&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

Then you could do something in pam for the apache service like

auth sufficient pam_ldap1...
auth sufficient pam_ldap2...

You'd likely have to compile the pam_ldap module twice, with slightly
different names, and different config file settings.  (unless you can
specify a config file to pam_ldap in the pam config ... donno, haven't
looked at that).

- -- Pat


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH9u5bNObCqA8uBswRAnY6AJ925YmzyhXPUfFpWG0ANOHZGvzQZQCfV1hs
z25faZo8ckCWXEaV3wbOTYE=
=wHsn
-----END PGP SIGNATURE-----

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to