[Date Prev][Date Next]
Re: apache + openldap
"Carl St-Jacques" <email@example.com> writes:
> We are looking for an apache module that can authenticate your users inside
> ldap groups and sub-groups. Right now we are using Netscape servers and it's
> working great. We tried with this module:
> without success. Does anybody know an apache module that can do groups and
> sub-groups authentification for users.
There were a bunch of Apache modules discussed on this list last week.
I'm not aware of any that can do sub-group authentication. In fact, as
an author of one of those modules (http://www.rudedog.org/auth_ldap),
it's my feeling that it's a bad idea to try to do recursive group member
compares, because it turns a simple LDAP compare operation into a whole
bunch of search and compare operations, and would severely impact
I don't know how the netscape web server does nested groups, but I bet
there is some kind of LDAP server-side optimization that they use.
Dave Carrigan (firstname.lastname@example.org) | Yow! I'm not available for
UNIX-Apache-Perl-Linux-Firewalls-LDAP-C-DNS | comment..
Seattle, WA, USA |