On Fri, Dec 5, 2008 at 11:48 PM, Eric Covener <covener@xxxxxxxxx> wrote: > On 12/5/08, Jesper Krogh <jesper.krogh@xxxxxxxxx> wrote: > >> Require ldap-group CN=TestGroup,OU=Groups,OU=Company >> require valid-user > > Require directives are OR'ed not AND'ed, despite the way "require" sounds. Removing the "require valid-user" from the configurataion changes the error message to: [Sat Dec 06 07:49:26 2008] [debug] mod_authnz_ldap.c(852): [client 10.194.134.5] [22264] auth_ldap authorise: authorisation denied But It still lets people in instead of sending a 401 page. -- Jesper --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx