On Thu, 5 Apr 2007, Bruce DeYoung wrote:

> We have an attribute in our LDAP directory called "groupmembership". Due
> to some issues in our back-end Notes/Domino database, values for
> groupmembership are like "Employee 1", "Employee 2", "Employee 3",
> etc.....but each of these is essentially the same, i.e a member of the
> "Employee" group.
>
> So, if I have content that I want to secure to members of the "Employee"
> group, I was hoping to use a wildcard like:
>
> require ldap-attribute groupmembership=Employee*
>
>
> <Directory "/var/www/support-dev2">
> #    Options Indexes
> #    AllowOverride None
> #    Order allow,deny
> #    Allow from all
>     AuthType Basic
>     AuthBasicProvider ldap
>     AuthzLDAPAuthoritative on
>     AuthName "Please enter your webaccount username and password:"
>     AuthLDAPURL ldap://domino-core.qad.com:389/?cn
>     require ldap-attribute groupmembership=Employee*
> #    require valid-user
>     AuthLDAPBindDN "cn=Domino Ldap,o=QADWEB"
>     AuthLDAPBindPassword [EMAIL PROTECTED]
> </Directory>
>
> If I change ldap-attribute to the following:
>
> require ldap-attribute groupmembership="Employee 6"
>
try using ldap-filter.

require ldap-filter &(groupmembership=Employee*)

or something like that.


----------------------------------------
"Mon aƩroglisseur est plein d'anguilles"
John P. Dodge
Boeing Shared Services


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to