> So the first question is: Is it normal that I have to use mod_rewrite to
> check for group membership ? I tried hundred of syntaxes with SetEnvIf
> or SetEnvIfExpr but I never managed to get it working. I'm not sure why
> but I guess it's somehow related to "race condition" (lazy evaluation)
> while evaluating environment variable, does it makes sense ?

SetEnvIf[expr] is evaluated very early, long before authn/authz occurs
and those environment variables can be filled out.

>
> Second question is: I cannot use "$" to make a proper regex matcher. If
> the group is not the last one, I can match it with ;.*$, if it is the
> last one, I should be able to match [...]DC=internal$, however that does
> not work. There's is one unknown character and I have no idea what it
> is. Matching with DC=internal.?$ works, so that's one SINGLE char... Any
> idea ?
>

You could send it out as a response header for debugging, or maybe
observe it with rewrite:trace8 in the error_log

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to