Mailing List Archive

On 2023-08-24 10:39, Prabhu Kondarangi wrote:
> Dear Team,
>
> I am looking for the possibility of supplying multiple group names within a
> single Require ldap-group directive.
> Is it possible even?
>
> Module: mod_authnz_ldap
> <https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html>
> Directive: Require ldap-group
> <https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html#reqgroup>
>
> Example:
>
> Require ldap-group group1 group2 group3
>
> Thanks,
> Prabhu
>
This should really be posted to users@httpd.apache.org, so I will
cross-post it there:


No, each ldap-group line should only have one group. but what you can do
is make a group that are AND or OR'ed together:

Require user be a part of two groups:
<RequireAll>
Require ldap-group cn=foo, ...
Require ldap-group cn=bar, ...
</RequireAll>

Require user be part of at least one group:
<RequireAny>
Require ldap-group cn=foo, ...
Require ldap-group cn=bar, ...
</RequireAny>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org