Apache Active Directory Authentication Help

Greetings everybody,

I am trying to authenticate users to a directory using Authz but am getting wacky results. I am either allowing everybody in who authenticates or authentication with a forbidden sign.

If I allow myself through "require user webb" it works perfectly.

<Location '/viewvc/testdirectory/'>
AuthType Basic
AuthName "Domain Credentials Required"
AuthzLDAPMethod ldap
AuthzLDAPServer ldap.example.com:389
AuthzLDAPLogLevel debug
AuthzLDAPBindDN "CN=ldap_query,OU=Service Accounts,OU=ISD,OU=GSO,DC=GSO,DC=Example,DC=com"
AuthzLDAPBindPassword "SECRET"
require group "CN=mygroup,OU=Groups,OU=Engineering,DC=gso,DC=example,DC=com"
#require valid-user
#require user webb
#Order allow,deny
#Allow from all
</Location>

The log results are below:

[webb@hostserver conf.d]$ sudo tail -f /var/log/httpd/error_log | grep 'client 192.168.0.5'
[Thu Jun 04 09:11:57 2009] [debug] mod_authnz_ldap.c(373): [client 192.168.0.5] [19097] auth_ldap authenticate: using URL ldap://ldap.Example.com:3268/DC=Example,DC=com?samAccountName?sub?(objectClass=*)
[Thu Jun 04 09:11:57 2009] [debug] mod_authnz_ldap.c(454): [client 192.168.0.5] [19097] auth_ldap authenticate: accepting webb
[Thu Jun 04 09:11:57 2009] [debug] mod_authnz_ldap.c(821): [client 192.168.0.5] [19097] auth_ldap authorise: declining to authorise
[Thu Jun 04 09:11:57 2009] [error] [client 192.168.0.5] [19097] search from 'CN=mygroup,OU=Groups,OU=Engineering,DC=gso,DC=example,DC=com' for '(member=(null))' returns -7 = 'Bad search filter'

Apparently, the parent directory permissions overrides the sub-directories on the server.

so if you have

/foo/1

Make sure you put the authz on /foo also before adding it to /foo/1

Ok here is my latest which authenticates me in. But now provides a 403 Forbidden page up.

I can get to the test page without the authentication, but with it it fails. The weird thing is that even with the forbidden message, nothing shows up in the error log or access log.

<Location '/test/'>
AuthType Basic
AuthName "Engineering Credentials Required"
AuthzLDAPMethod ldap
AuthzLDAPServer ldap.example.com:389
AuthzLDAPLogLevel debug
AuthzLDAPBindDN "CN=ldap_query,OU=Service Accounts,OU=ISD,OU=GSO,DC=GSO,DC=example,DC=com"
AuthzLDAPBindPassword SECRET
AuthzLDAPUserKey sAMAccountName
AuthzLDAPUserBase "DC=gso,DC=example,DC=com"
AuthzLDAPUserScope subtree
Require group CN=GSO-SVNDAVAuth,OU=GroupsENG,OU=Engineering,DC=gso,DC=example,DC=com
</Location>