Karl Katzke

It’s easy to miss the single line in the auth_nz_ldap documentation that says “When using mod_auth_basic, this module is invoked via the AuthBasicProvider directive with the ldap value.”

It would help, of course, if someone provided a complete example for an auth_nz_ldap configuration, so here you go:

<Directory /path/to/my/web>
   Options ExecCGI
   order deny,allow
   deny from all
   allow from my.tld
   AuthType Basic
   AuthName "My LDAP Authentication"
   AuthBasicProvider ldap
   AuthLDAPUrl ldaps://server.tld/o=USERS?cn
   AuthzLDAPAuthoritative Off
   AuthUserFile /dev/null
   Require valid-user
</Directory>

Note: I’m using the canonical name because this is the way my ldap server is configured, typically you’d want to use a ?uid.