Multiple security realms

[MarkRound]

Hi,

Under Apache, you can specify that an authorisation realm should not be authoritative, so that if one realm doesn't authenticate it can try another.

This means you can (for instance) have a LDAP group protected area, but override it with local users from a password file if needed.

For example, your Apache config might look something like :


AuthBasicAuthoritative Off
AuthName "protected"
AuthType Basic
AuthBasicProvider ldap file

AuthUserFile /path/to/passwd.file
AuthzUserAuthoritative off
require valid-user

AuthLDAPURL ldap://...
AuthzLDAPAuthoritative off
require ldap-group cn=htaccess,ou=groups,dc=example,dc=com


Is it possible to use multiple authentication realms in LiteSpeed, or are there any plans to add them in future ?

Thanks,

-Mark

 

[mistwang]

It is not possible to use multiple authentication realm like that, there is no plan to add a feature like that yet.

 

[MarkRound]

Oh well, it was not a major show-stopper anyway. Thanks for the quick reply!

-Mark