Linux/Apache - combine mod_auth_kerb and ldap - to be or not tobe???

[Christopher D. Clausen]

kerbie_newbie <zarafield at sky.com> wrote:
> At least in Apache 2.0, it is extremely difficult in Apache to get two
> authentication modules to co-exist; Apache by and large considers any
> particular portion of the URL space to be protected by only one
> authentication scheme (possibly combined with IP address
> restrictions). This is partly a limitation of Apache (particularly
> the configuration syntax) and partly related to difficulties in the
> HTTP protocol (you can't easily negotiate and attempt multiple
> authentication protocols in turn).

from:
http://modauthkerb.sourceforge.net/configure.html
KrbAuthoritative off
will allow you to pass to authn/authz to another module.

I've used a module that verifies against OpenAFS PTS groups and I assume 
LDAP works the same way.

<<CDC