> AuthOrder user group dbm-group which specifies an order of authz checks,
> and makes the last one 'authoritative' in terms of the old logic.
>
> Of course that still leaves file-group looking lonely.  Maybe what that
> wants is a provider from authz_[file|dbm|dbd|ldap|etc] ?

Or go back to this naming concept floating at one point:

        require group ldap:foo

which solves this class of problems (but kills the failover part; i.e.
getting a group check done in ldap if possible; but fall trough to
htpasswd if all is down).

Dw

Reply via email to