AuthnProviderAlias and require ldap-group

["Mika Hiekkamäki" <mika.hiekkamaki@xxxxxxxxx>]

If I use multiple ldap providers with mod_authn_alias can I still use "require ldap-group cn=xxx" syntax? All examples I have seen use only "require valid-user" syntax, but I need ldap-groups for authorization. If it is possible to use

ldap-groups for authorization (with AuthnProviderAlias) I would like to know how.

 

Here is the basic syntax I am talking about.

 

LoadModule authn_alias_module modules/mod_authn_alias.so

<AuthnProviderAlias ldap ldap-alias1>
AuthLDAPBindDN cn=youruser,o=ctx
AuthLDAPBindPassword yourpassword
AuthLDAPURL ldap://ldap.host/o=ctx
</AuthnProviderAlias>

<AuthnProviderAlias ldap ldap-other-alias>
AuthLDAPBindDN cn=yourotheruser,o=dev
AuthLDAPBindPassword yourotherpassword
AuthLDAPURL ldap://other.ldap.host/o=dev?cn
</AuthnProviderAlias>

Alias /secure /webpages/secure
<Directory /webpages/secure>
Order deny,allow
Allow from all

AuthBasicProvider ldap-other-alias ldap-alias1

AuthType Basic
AuthName LDAP_Protected_Place
AuthzLDAPAuthoritative off
Require valid-user
</Directory>

Can anyone help me?
Regards

 

Mika Hiekkamäki