I wouldn't mix the two methods. There's probably a way to make that work, but that's an HTTPD question, not a CAS question. You can have CAS authenticate against LDAP from the CAS IdP. That can either then return the list of attributes to have mod_auth_cas filter on. Or you can have the IdP do filtering on its side, depending on your needs.
On Thu, 2021-02-11 at 18:38 -0800, KC Pullen wrote: Hello, I'm currently using CAS to protect web directories on Linux Centos7 and Apache 2.4.6. I'd like to use LDAP to grant authorization to select groups. The following is a list the sites/blogs that I'm using for reference: - https://fy.blackhats.net.au/blog/html/2011/07/10/Mod_auth_cas.html - https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html#authldapurl - https://stackoverflow.com/questions/8939487/how-to-support-require-group-foobar-in-mod-auth-cas Now, for "valid-user", there is no problem at all, but if I try to use LDAP and a filter, I'm getting the "Unauthorized" message. Below is a snippet from my conf file: <Directory /var/www/html/my-test-site> AuthName "Test password protection for directory" AuthType CAS AuthLDAPURL "ldaps://mysite.edu:636/cn=Users,dc=mysite,dc=edu?email?sub?(objectClass=*)<http://mysite.edu:636/cn=Users,dc=nl,dc=edu?email?sub?(objectClass=*)>" Require ldap-filter &([email protected]<https://groups.google.com/>) # Require valid-user </Directory> Would anyone be able to take a look and provide a suggestion or two ? Maybe share a link to a blog or web-page..? Thank you kindly, KP -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/b73b5c47db40d3b46dc859b8c176761f45625b7f.camel%40ndsu.edu.
