I believe another advantage to the mod_perl approach was that the group membership was not retained anywhere in the HTTP vars I think. The mod_perl (may have been mod_auth_perl?) script was easily modifiable to allow that.

On 06/04/2011 09:18 AM, Curt Lundgren wrote:
If Apache were written in Perl, but -- let's not go there!

I do have LDAP authentication working, just not on the basis of group membership. Perhaps some day I'll stumble on the magic combination, but for now, this will be fine.

Curt

On Sat, Jun 4, 2011 at 8:47 AM, Jack Coats <[email protected] <mailto:[email protected]>> wrote:

    Curt, ... I would expect this would be 'just a small perl script' from
    you :) ... Jack

    "You don't manage people; you manage things. You lead people."
    "It’s easier to ask forgiveness than it is to get permission" — Grace
    Hopper, US Navy Admiral




    On Sat, Jun 4, 2011 at 3:12 AM, Curt Lundgren <[email protected]
    <mailto:[email protected]>> wrote:
    > Thanks Richard - for the moment, I've given up on the group
    membership
    > approach.  There are only a few users who need to authorize, and the
    > authentication worked immediately.  I don't care for the idea of
    having to
    > modify httpd.conf to change the list of people, but I also don't
    expect to
    > have to change the list often.
    >
    > Curt

    --
    You received this message because you are subscribed to the Google
    Groups "NLUG" group.
    To post to this group, send email to [email protected]
    <mailto:[email protected]>
    To unsubscribe from this group, send email to
    [email protected]
    <mailto:nlug-talk%[email protected]>
    For more options, visit this group at
    http://groups.google.com/group/nlug-talk?hl=en


--
You received this message because you are subscribed to the Google Groups "NLUG" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en

--
You received this message because you are subscribed to the Google Groups 
"NLUG" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/nlug-talk?hl=en

Reply via email to