[users@httpd] LDAP query translation from 2.2 to 2.4

[Darryl Philip Baker]

I am trying to port a configuration from Apache 2.2 to Apache 2.4 that is used 
for LDAP authentication, but I have little knowledge of LDAP. I can translate 
“Order deny,allow” and “Deny from All” I have found that 
“AuthzLDAPAuthoritative off” has been removed from Apache 2.4. I am getting a 
syntax error on the AuthLDAPUrl line. From one of the examples I found, do I 
need to change from a Directory block to a Location block?

Here is what the stanza is in Apache 2.2

<Directory "/usr/local/www/docs/it/snaps">
         Options -Indexes +FollowSymLinks +ExecCGI +Includes
         Order deny,allow
         Deny from All
         AuthName "Enter Your Netid and Password"
         AuthType basic
         AuthBasicProvider ldap
         AuthzLDAPAuthoritative off
         AuthLDAPBindDN "cn=sanitycheck, ou=Service, dc=example, dc=com"
         AuthLDAPBindPassword "tmd+pkx"
         AuthLDAPUrl     
"ldaps://evregistryprda.cyber.example.com.cyber.example.com:1636 
ldaps://chregistryprda.cyber.example.com.cyber.example.com:1636 
ldaps://evregistryprdb.cyber.example.com.cyber.example.com:1636 
ldaps://chregistryprdb.cyber.example.com.cyber.example.com:1636/dc=example,dc=com?uid?sub?(objectclass=*)"
         Require valid-user
         Satisfy any
   </Directory>


Darryl Baker, GSEC  (he/him/his)
Sr. System Administrator
Distributed Application Platform Services
Northwestern University
1800 Sherman Ave.
Suite 6-600 – Box #39
Evanston, IL  60201-3715
darryl.ba...@northwestern.edu<mailto:darryl.ba...@northwestern.edu>
(847) 467-6674