On Sat, Feb 28, 2009 at 11:42 AM, Markus Moeller <hua...@moeller.plus.com> wrote: > Has anybody a sample configuration for mod_auth_kerb or mod_auth_gss with > mod_authnz_ldap ? > > I'd like to authenticate the user with GSSAPI/SPNEGO and then authorize with > ldap groups. The problem I see in my case is that the username has the realm > (e.g. u...@mydomain.com), but my ldap uid does not. Is there a generic way > of mapping usernames or a specific option in mod_authnz_ldap to cut off the > @mydomain.com part ?
Do you have any other attribute in your ldap that has the very same u...@mydomain.com value? I am not aware of any way to transform the username before LDAP sees it. -- Eric Covener cove...@gmail.com --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org