httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "J.Lance Wilkinson" <jl...@psu.edu>
Subject Re: [users@httpd] Dynamic selection of mod_authnz_ldap's 'require ldap-group' object?
Date Wed, 21 Mar 2012 16:08:02 GMT
J.Lance Wilkinson wrote:
> I don't believe I ever got a reply to this, so since it's been a month I'll
> repeat it...
> 
>     the story so far:  I have a need to be able to parse into an
>     environment variable (using Rewrite rules or some such) a value
>     that then can be used in a *require* directive like
> 
>         require ldap-group   
>     or    require ldap-filter
> 
>     Using Apache v2.2.6 on Solaris 10, Apache 2.2.15 on Linux RHEL 6,
>     pretty much the same Apache configurations on both.
> 
>     Is this something possible NOW using stock modules, or is this
>     something that I will have with Apache 2.4 and its stock modules,
>     or is this something I would need to implement new or modified
>     code to achieve?


	I'll further clarify what I WANT to do...

	<Location ~ "^/(.*)/member.(.*)(.html|/(.*)?)$">
	   SetEnvIf Request_URI "^/(.*)/member.(.*)(.html|/(.*)?)$" MBRSHP=$2
		...
	   require ldap-group cn=umg/%{MBRSHP},dc=xxx,dc=yyy:
		...
	</Location>

	So, how to supply the information parsed from the URI as part of the
	argument to the require ldap-group directive *at REQUEST time*.   Is
	that %{xxx} resolution something that takes place at the time the
	request is being serviced and honored, or is it something that only
	applies as the configuration is being processed?

	I'm already using mod_define.so as a loaded module, if that makes
	any difference (to my advantage or disadvantage...)...

-- 
J.Lance Wilkinson ("Lance")		InterNet: Lance.Wilkinson@psu.edu
Systems Design Specialist - Lead	Phone: (814) 865-4870
Digital Library Technologies		FAX:   (814) 863-3560
E3 Paterno Library
Penn State University
University Park, PA 16802

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message