RE: Checking for group membership in a mod perl handler.

["Dami Laurent (PJ)" <suppressed>]

>.... I want to use a
>perl module to check group membership. Specifically I want to check
>the "department" property in our active directory, and use this to
>allow or deny access.
>
>Writing Perl code that gets this info from the AD is not the problem.
>My problem is that its not clear to me how to tie this code in the
>whole apache processing.
>
>Do I need to write a PerlAuthzHandler? Or something else?
>

Hi Krist,

You already have the answer : what you need is a PerlAuthzHandler. 
See the example in
http://perl.apache.org/docs/2.0/user/handlers/http.html#PerlAuthzHandler
.

Your handler code can use Apache2::Access::requires to find out about
require directives for this request, and then use that info to ask your
AD server.

Best regards, Laurent Dami