Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We're using the authnz_ldap_module with Apache 2.2.12. Is the authentication configuration for a sub-directory inherited from the parent directory?

Considering the following configuration in httpd.conf:

<Directory htdocs/users/admin/>
    Require ldap-attribute memberOf="<ad_group>"

<Directory htdocs/users/admin/tool>
    Require ldap-user JimSmith

We have the admin directory and the admin/tool sub-directory. Does ldap-user JimSmith have to be a part of ad_group to access the admin/tools directory? Does the admin/tool directory inherit "Require ldap-attribute memberOf" from the admin directory config?

share|improve this question

migrated from stackoverflow.com Oct 8 '12 at 6:58

This question came from our site for professional and enthusiast programmers.

This is a rather basic aspect of Apache configuration and it is addressed in the documentation. Off topic for SO. –  EJP Oct 4 '12 at 0:44
I've read the documentation, httpd.apache.org/docs/current/mod/core.html#directory, and understand that it's suppose to apply to the dir, sub-dirs, and files. What I'm questioning is how does it behave with ldap authentication (ldap-user, ldap-attribute, etc) since I'm getting odd behavior trying to give a certain user access to a specific folder. Thanks for pointing out this maybe doesn't belong in here. I'll see if I can get it moved. –  MD6380 Oct 5 '12 at 2:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.