I want to combine mod_auth_mysql with mod_auth_ldap. User authentication is handled through LDAP, however authorization on a user's group (not stored in LDAP but in MySQL) should be handled by mod_auth_mysql. I do not want mod_auth_mysql to recheck the authenticated subject but only look if a required group matches. Is this possible? What configuration changes need to be made to make this work?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
I want to combine mod_auth_mysql with mod_auth_ldap. User authentication is handled through LDAP, however authorization on a user's group (not stored in LDAP but in MySQL) should be handled by mod_auth_mysql. I do not want mod_auth_mysql to recheck the authenticated subject but only look if a required group matches. Is this possible? What configuration changes need to be made to make this work?