Forum Moderators: phranque

Message Too Old, No Replies

mod_auth_ldap and spanning baseDNs

can mod_auth_ldap search over multiple baseDNs

         

jknudson

6:39 pm on Mar 11, 2004 (gmt 0)



I am using Apache2.0.48 with mod_auth_ldap and am having a problem composing a certain search. I have a tree with a single Organization containing three primary OU's under it. I want to create an access control file which will allow any valid user under either of the first two OU's to authenticate, but not the other. I have tried syntax such as:

AuthType Basic
AuthName "Allow Anyone Under Acad.org or Admin.org"

AuthLDAPUrl ldap://ldapserver.org/ou=admin,o=org?uid?sub
AuthLDAPUrl ldap://ldapserver.org/ou=acad,o=org?uid?sub

require valid-user

but it seems that only the second base DN gets searched.

Can I specify multiple baseDN's on one line? If so, what syntax.

Can I do a baseDN o=wlu search and filter the results for the acad or admin ou?

Can someone nudge me in the right direction?

-Web server is on RedHat AS 2.1
-LDAP server is Novell NetWare 6.0/eDir 8.6.2
-Basic LDAP auth works fine.

Thanks.

JK