Displaying 1 result from an estimated 1 matches for "authzsendforbiddenonfailure".
2017 Apr 04
1
Apache2 Kerberos-Authentication and LDAP-Authorization
...cn=Users,DC=X,DC=Y
# Sends forbidden when Kerberos authentication succeeded,
# but LDAP authorization failed. This is the case when a
# user is not in the required group.
#
# IE and Chrome do not like the http status 401 in combination
# with a valid WWW-Authenticate header in the response.
AuthzSendForbiddenOnFailure On
Options +ExecCGI
# Optional
ErrorDocument 401 "Check your ticket/password"
ErrorDocument 403 "Login OK, but you are not allowed here"
</Directory>
It would be very nice to get rid of the AuthLDAPBindPassword, if
somebody knows a way. But it seems that mod_authnz_...