On 25 Sep 2010, at 08:14, swm38 swm38 wrote: > Hello, > > I've set up ldap authentication and would like to allow access to all > users in groupA and another user userA (not part of the group). > > Require user userA > Require ldap-group groupA > Satisfy any > > This doesn't work, it accepts any user. Yep, seems likely. Re-read the documentation of "Satisfy" for details. The concept you're looking for is "Authoritative" authorization (you need to turn it Off to use more than one Require with OR logic). -- Nick Kew --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx