1

I currently have LDAP authentication configured for Mercurial using the following Apache configuration:

<Location /hg>
      AuthBasicProvider ldap
      AuthType basic
      AuthName "Mercurial Repository"

      AuthBasicAuthoritative on

      AuthLDAPBindDN "uid=username,ou=ou_name,dc=dc_name,dc=dc_name,dc=dc_name"
      AuthLDAPBindPassword password

      AuthLDAPURL "ldaps://ldap_server:636/dc=dc_name,dc=dc_name,dc=dc_name"

      Require valid-user

      Allow from 127.0.0.1 *.*.*.*/**  *.*.*.*/**
</Location>

This allows all of our LDAP users to access the repositories but ideally we would like to limit it to an LDAP group. I thought it would just be a case of replacing "Require valid-user" with "Require ldap-group cn=group_name,ou=group,dc=dc_name,dc=dc_name,dc=dc_name" but this results in "authorization failure for" errors after restarting apache.

Is there anything else that needs to be done?

Alan Spark
  • 143
  • 7

0 Answers0