>Does it happen without the mod_auth_alias? 
I don't think I have tested that.  Will do so now.

>I thought you were describing an error without "require valid-user"?
I just pasted the config from my original post.  When I tested without the 
"Require valid-user", the line was commented out.


PATI MOSS
System Engineer Sr. Professional
CSC



From:
Eric Covener <cove...@gmail.com>
To:
users@httpd.apache.org
Date:
11/19/2010 11:00 AM
Subject:
Re: [us...@httpd] Group authentication to AD



On Fri, Nov 19, 2010 at 10:57 AM, Patricia A Moss <pmo...@csc.com> wrote:
>
> >With what configuration exactly?
> My location block is configured as below:
> <Location /test_repo>
> dav svn
> SVNPath /disk01/home/test_repo
> AuthType Basic
> AuthName "Subversion Repository"
> AuthBasicProvider ldap-FCGNET ldap-VIET
> AuthzLDAPAuthoritative on
> Require valid-user
> Require ldap-group CN=Active_Directory Group 
Name,OU=U.S.,OU=Groups,DC=domain,DC=com
> #Require ldap-user pmoss
> </Location>
>
> I've configured my aliases, in my http.conf file, as follows:
> <AuthnProviderAlias ldap ldap-FCGNET>
>         AuthLDAPBindDN FCGNET\account_name
>         AuthLDAPBindPassword xxxxxxxxxx
>         AuthLDAPURL 
ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person)
> </AuthnProviderAlias>
> <AuthnProviderAlias ldap ldap-VIET>
>         AuthLDAPBindDN "CN=account_name,OU=Service 
Accounts,OU=Users,OU=Production,DC=domain,DC=com"
>         AuthLDAPBindPassword xxxxxxxxx
>         AuthLDAPURL 
ldap://server.domain.com:3268/DC=domain,DC=com?samAccountName?sub?(objectCategory=person)
> </AuthnProviderAlias>
>

Does it happen without the mod_auth_alias?  I thought you were
describing an error without "require valid-user"?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
   "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org



Reply via email to