httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jim Jagielski <...@jaguNET.com>
Subject Re: [PATCH]: LDAP Authz (was: Ldap Authorization)
Date Wed, 03 Nov 2004 15:09:35 GMT
Good suggestion. I am +1 for the patch as-is with the intent
of looking into adding the below

On Nov 3, 2004, at 5:04 AM, Graham Leggett wrote:

> Brad Nicholes wrote:
>
>>    I took a quick look at this patch and it seems to work well as long
>> as all of the listed attributes are OR'ed together.  I don't have a 
>> good
>> suggestion yet, but is there a way to implement the logic so that
>> attributes could be also AND'ed together?  Or even a NOT-EQUAL
>> operation?
>
> I think the best way to do this probably is instead of saying "require 
> ldap-attribute" you say "require LDAP filter".
>
> In other words, like this:
>
> require filter (objectclass=specialPerson)
>
> or
>
> require filter (host=somehost.com)
>
> This supports more complicated stuff, like this:
>
> require filter (&(objectclass=specialPerson)(host=somehost.com))
>
> Regards,
> Graham
> --
>
--
=======================================================================
  Jim Jagielski   [|]   jim@jaguNET.com   [|]   http://www.jaguNET.com/
   "There 10 types of people: those who read binary and everyone else."


Mime
View raw message