RE: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-25 Thread Mark H. Wood
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 One bit of fun you'll have is that Windows users expect groups to nest, but LDAP doesn't seem to do that. That is, you can have a group G some of whose members are groups G2, G3 etc. and an object which is only a member of (say) group G2 will be consi

Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-25 Thread Dmitri Colebatch
On 5/25/06, Robin P. Blanchard <[EMAIL PROTECTED]> wrote: Yup. Two identical lines apart from the hosts. I'm a *bsd guy so I'm a bit more familiar with ipfilter / pf syntax. Perhaps you could send me a simple iptables scenario to block traffic to/from host ? Sure - will do tomorrow when I get a

RE: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-25 Thread Robin P. Blanchard
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Dmitri Colebatch > Sent: Thursday, May 25, 2006 9:46 AM > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups > > On 5/25/06, Robin

Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-25 Thread Dmitri Colebatch
On 5/25/06, Robin P. Blanchard <[EMAIL PROTECTED]> wrote: For what it's worth (this is httpd-2.0.58), I just tried: AuthLDAPURL "ldap://server1/OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat?sAMAccountName?su b?(objectclass=*)" AuthLDAPURL "ldap://server2/OU=Divisions,OU=Users,OU=gactr,DC=gc,DC=nat

RE: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-25 Thread Robin P. Blanchard
> Sent: Wednesday, May 24, 2006 6:25 PM > To: users@httpd.apache.org > Subject: Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups > > Hi Robin, > > On 5/25/06, Robin P. Blanchard > <[EMAIL PROTECTED]> wrote: > > [snip] > > > AuthLDAPURL > >

Re: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-24 Thread Dmitri Colebatch
Hi Robin, On 5/25/06, Robin P. Blanchard <[EMAIL PROTECTED]> wrote: [snip] AuthLDAPURL "ldap://server.name/OU==Divisions,OU=Users,OU=gactr,DC=gc,DC=nat?sAMAccountNa me?sub?(objectclass=*)" I don't suppose you've had the need to try this with multiple servers? I posted last week (see http://m

RE: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-24 Thread Robin P. Blanchard
> -Original Message- > From: Aaron Axelsen [mailto:[EMAIL PROTECTED] > Sent: Wednesday, May 24, 2006 3:28 PM > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups > > -BEGIN PGP SIGNED MESSAGE- &g

RE: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-24 Thread Wagner, Aaron
> -Original Message- > From: Aaron Axelsen [mailto:[EMAIL PROTECTED] > Sent: Wednesday, May 24, 2006 15:28 > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups > > Is it possible to authentication apache2 agaisnt Active Directory

[EMAIL PROTECTED] Auth Apache 2 agaisnt AD Groups

2006-05-24 Thread Aaron Axelsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is it possible to authentication apache2 agaisnt Active Directory 2003 groups? I've been able to successful auth AD users, and auth according to current ou's, but I haven't seen anything about going agaisnt an AD group. Is it doable? Thanks, - --