Bruce DeYoung schrieb: [snip] > We have an attribute in our LDAP directory called "groupmembership". Due > to some issues in our back-end Notes/Domino database, values for > groupmembership are like "Employee 1", "Employee 2", "Employee 3", > etc.....but each of these is essentially the same, i.e a member of the > "Employee" group. > > So, if I have content that I want to secure to members of the "Employee" > group, I was hoping to use a wildcard like: > > require ldap-attribute groupmembership=Employee* > > But this is not working. In fact, there's not even an error in the log > file. I don't know if regexp's are allowed in apache ldap-attribute settings. I guess you can stick the groupmembership in the AuthLDAPURL though IF "groupmembership" has a substring matching rule defined: AuthLDAPURL ldap://domino-core.qad.com:389/?cn??(groupmembership=Employee*) check rfc2255 for ldapURLs cheers Paul --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx