On Thu, 5 Apr 2007, Bruce DeYoung wrote: > We have an attribute in our LDAP directory called "groupmembership". Due > to some issues in our back-end Notes/Domino database, values for > groupmembership are like "Employee 1", "Employee 2", "Employee 3", > etc.....but each of these is essentially the same, i.e a member of the > "Employee" group. > > So, if I have content that I want to secure to members of the "Employee" > group, I was hoping to use a wildcard like: > > require ldap-attribute groupmembership=Employee* > > > <Directory "/var/www/support-dev2"> > # Options Indexes > # AllowOverride None > # Order allow,deny > # Allow from all > AuthType Basic > AuthBasicProvider ldap > AuthzLDAPAuthoritative on > AuthName "Please enter your webaccount username and password:" > AuthLDAPURL ldap://domino-core.qad.com:389/?cn > require ldap-attribute groupmembership=Employee* > # require valid-user > AuthLDAPBindDN "cn=Domino Ldap,o=QADWEB" > AuthLDAPBindPassword Dom!no7d@p > </Directory> > > If I change ldap-attribute to the following: > > require ldap-attribute groupmembership="Employee 6" > try using ldap-filter. require ldap-filter &(groupmembership=Employee*) or something like that. ---------------------------------------- "Mon aéroglisseur est plein d'anguilles" John P. Dodge Boeing Shared Services --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|