DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=31352>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31352

RFE, Bind to LDAP server with browser supplier user/pass

[EMAIL PROTECTED] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED



------- Additional Comments From [EMAIL PROTECTED]  2004-10-17 17:56 -------
Access to the LDAP directory is governed by the AuthLDAPBindDN and
AuthLDAPBindPassword directives, these should be set to an LDAP object that is
allowed to search for users amongst the user objects, and compare for group
membership amongst the group objects. This object would be granted neither read
nor write access to your directory.

Binding as the end user means that end users can both search for other users,
and query group memberships. This is less secure than one account specified in
the httpd config file for this specific purpose.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to