[users@httpd] Re: Can supply multiple group names within a single Require ldap-group directive

[Daniel Gruno <hu...@apache.org>]

On 2023-08-24 10:39, Prabhu Kondarangi wrote:
> Dear Team,
> 
> I am looking for the possibility of supplying multiple group names within a
> single Require ldap-group directive.
> Is it possible even?
> 
> Module: mod_authnz_ldap
> <https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html>
> Directive: Require ldap-group
> <https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html#reqgroup>
> 
> Example:
> 
> Require ldap-group group1 group2 group3
> 
> Thanks,
> Prabhu
> 
This should really be posted to users@httpd.apache.org, so I will 
cross-post it there:


No, each ldap-group line should only have one group. but what you can do 
is make a group that are AND or OR'ed together:

Require user be a part of two groups:
<RequireAll>
   Require ldap-group cn=foo, ...
   Require ldap-group cn=bar, ...
</RequireAll>

Require user be part of at least one group:
<RequireAny>
   Require ldap-group cn=foo, ...
   Require ldap-group cn=bar, ...
</RequireAny>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org