]> git.ipfire.org Git - thirdparty/apache/httpd.git/commitdiff
Bug 64458: Strengthen no-quotes warnings for Require ldap-group and ldap-dn; explain...
authorRich Bowen <rbowen@apache.org>
Sat, 2 May 2026 20:43:13 +0000 (20:43 +0000)
committerRich Bowen <rbowen@apache.org>
Sat, 2 May 2026 20:43:13 +0000 (20:43 +0000)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1933732 13f79535-47bb-0310-9956-ffa450edef68

docs/manual/mod/mod_authnz_ldap.xml

index 65a56bdc94d92c9924426610515b3003a3e8b977..0de645ff3a81853e21ee04037154258a6ff655e1 100644 (file)
@@ -379,8 +379,13 @@ Require ldap-user bjenson fuser jmanager
 
     <p>This directive specifies an LDAP group whose members are
     allowed access. It takes the distinguished name of the LDAP
-    group. Note: Do not surround the group name with quotes.
-    For example, assume that the following entry existed in
+    group.</p>
+
+    <note type="warning">Do not surround the group name with quotes.
+    Unlike <code>Require ldap-user</code>, the <code>ldap-group</code>
+    provider does not support quoted values.</note>
+
+    <p>For example, assume that the following entry existed in
     the LDAP directory:</p>
 <example><pre>
 dn: cn=Administrators, o=Example
@@ -453,8 +458,11 @@ AuthLDAPMaxSubGroupDepth 1
     that must match for access to be granted. If the distinguished
     name that was retrieved from the directory server matches the
     distinguished name in the <code>Require ldap-dn</code>, then
-    authorization is granted. Note: do not surround the distinguished
-    name with quotes.</p>
+    authorization is granted.</p>
+
+    <note type="warning">Do not surround the distinguished name with
+    quotes.  Unlike <code>Require ldap-user</code>, the
+    <code>ldap-dn</code> provider does not support quoted values.</note>
 
     <p>The following directive would grant access to a specific
     DN:</p>