Shibboleth SP / LDAP groups / htaccess files

[Cantor, Scott]

On 3/11/19, 4:23 PM, "users on behalf of Lohr, Donald" <users-bounces at shibboleth.net on behalf of lohrda at jmu.edu> wrote:

> We read some Shib documentation for apache configuration that indicated 
> the use of ldap groups died at apache 2.2.  We are running apache 2.4.

There has never been any support for LDAP groups in the SP, that's another module's function. The 2.4 SP module has the options and corrections necessary to support the authz container support in Apache that lets rules be mixed from different modules. That was never really supported in Apache prior to 2.4 and whatever worked only did so incidentally and accidentally. In other words, you have it more or less backwards.

-- Scott