httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Graham Leggett <minf...@sharp.fm>
Subject Re: [PATCH]: LDAP Authz (was: Ldap Authorization)
Date Wed, 03 Nov 2004 10:04:51 GMT
Brad Nicholes wrote:

>    I took a quick look at this patch and it seems to work well as long
> as all of the listed attributes are OR'ed together.  I don't have a good
> suggestion yet, but is there a way to implement the logic so that
> attributes could be also AND'ed together?  Or even a NOT-EQUAL
> operation?

I think the best way to do this probably is instead of saying "require 
ldap-attribute" you say "require LDAP filter".

In other words, like this:

require filter (objectclass=specialPerson)

or

require filter (host=somehost.com)

This supports more complicated stuff, like this:

require filter (&(objectclass=specialPerson)(host=somehost.com))

Regards,
Graham
--

Mime
View raw message