Re: Can supply multiple group names within a single Require ldap-group directive

[Daniel Gruno <humbedooh@xxxxxxxxxx>]

On 2023-08-24 10:39, Prabhu Kondarangi wrote:
> Dear Team,
>
> I am looking for the possibility of supplying multiple group names within a
> single Require ldap-group directive.
> Is it possible even?
>
> Module: mod_authnz_ldap
> <https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html>
> Directive: Require ldap-group
> <https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html#reqgroup>
>
> Example:
>
> Require ldap-group group1 group2 group3
>
> Thanks,
> Prabhu
This should really be posted to users@xxxxxxxxxxxxxxxx, so I will 
cross-post it there:


No, each ldap-group line should only have one group. but what you can do 
is make a group that are AND or OR'ed together:

Require user be a part of two groups:
<RequireAll>
  Require ldap-group cn=foo, ...
  Require ldap-group cn=bar, ...
</RequireAll>

Require user be part of at least one group:
<RequireAny>
  Require ldap-group cn=foo, ...
  Require ldap-group cn=bar, ...
</RequireAny>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx