On Tue, Feb 26, 2008 at 9:17 AM, Jeff Eggen <jeggen@xxxxxxxxx> wrote: > <AuthnProviderAlias ldap ldap-site> > AuthLDAPURL ldap://*****/o=root?uid??(objectClass=inetOrgPerson) > AuthLDAPDereferenceAliases never > </AuthnProviderAlias> > > <Directory "/my/directory/htdocs/Infrastructure/private"> > AuthBasicProvider ldap-site > require ldap-group cn=mygroup,ou=container,ou=container,o=root I believe Brad Nicholes fielded a bug report or users@ on this matter within the last dozen weeks or so. When you define AuthLDAPURL in an AuthnProviderAlias, you also need to explicitly define the AuthLDAPUrl in any context where you use LDAP authorization (emphasis on authn vs authz) mod_authnz_ldap probably bailed out of authorization pretty quicklty when it didn't see an AuthLDAPUrl defined. -- Eric Covener covener@xxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx