[users@httpd] AuthnProviderAlias and require ldap-group

[Mika Hiekkamäki <mi...@gmail.com>]

If I use multiple ldap providers with mod_authn_alias can I still use
"require ldap-group cn=xxx" syntax? All examples I have seen use only
"require valid-user" syntax, but I need ldap-groups for authorization. If it
is possible to use
ldap-groups for authorization (with AuthnProviderAlias) I would like to know
how.

Here is the basic syntax I am talking about.

LoadModule authn_alias_module modules/mod_authn_alias.so

<AuthnProviderAlias ldap ldap-alias1>
AuthLDAPBindDN cn=youruser,o=ctx
AuthLDAPBindPassword yourpassword
AuthLDAPURL ldap://ldap.host/o=ctx
</AuthnProviderAlias>

<AuthnProviderAlias ldap ldap-other-alias>
AuthLDAPBindDN cn=yourotheruser,o=dev
AuthLDAPBindPassword yourotherpassword
AuthLDAPURL ldap://other.ldap.host/o=dev?cn
</AuthnProviderAlias>

Alias /secure /webpages/secure
<Directory /webpages/secure>
Order deny,allow
Allow from all

AuthBasicProvider ldap-other-alias ldap-alias1

AuthType Basic
AuthName LDAP_Protected_Place
AuthzLDAPAuthoritative off
Require valid-user
</Directory>

Can anyone help me?
Regards

Mika Hiekkamäki