Works here: AuthName "some name here" AuthType Basic AuthLDAPBindDN "apropriate info here" AuthLDAPBindPassword password AuthLDAPAuthoritative on AuthLDAPRemoteUserIsDN on AuthLDAPGroupAttribute member AuthLDAPGroupAttributeIsDN on AuthLDAPURL "ldap://server.name/OU==Divisions,OU=Users,OU=gactr,DC=gc,DC=nat?sAMAccountNa me?sub?(objectclass=*)" <Limit GET> Require group CN=NSS,OU=Networking Support Services,OU=Information Technology Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat Require group CN=WSS,OU=Workstation Support Services,OU=Information Technology Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat Require group CN=PSS,OU=Programming Support Services,OU=Information Technology Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat Require group CN=ITS-adm,OU=Information Technology Services,OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat </Limit> Where the CN's are "security group - global" in AD. Hope this helps. --------------------------------------- Robin P. Blanchard Systems Integration Specialist Georgia Center for Continuing Education fon: 706.542.2404 < > fax: 706.542.6546 --------------------------------------- > -----Original Message----- > From: Aaron Axelsen [mailto:lists@xxxxxxxxxxxx] > Sent: Wednesday, May 24, 2006 3:28 PM > To: users@xxxxxxxxxxxxxxxx > Subject: [users@httpd] Auth Apache 2 agaisnt AD Groups > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Is it possible to authentication apache2 agaisnt Active > Directory 2003 groups? I've been able to successful auth AD > users, and auth according to current ou's, but I haven't seen > anything about going agaisnt an AD group. Is it doable? > > Thanks, > > - -- > Aaron Axelsen > lists@xxxxxxxxxxxx > > Great hosting, low prices. Modevia Web Services LLC -- > http://www.modevia.com -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2.2 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFEdLO0uucONIvD0AMRAquLAJ9XkWq4Y205qj4+uacSik6kWB1jWACg59oX > IWe6a/rZ7A7ZnMjnOmgYbdY= > =/BBC > -----END PGP SIGNATURE----- > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP > Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx