using apache and mod_auth_ldap to restrict access by groups

I'm using the mod_auth_ldap with apache to attempt to block access to a
directory based on group membership. I've successfully bound to the
active directory server and authenticated with my user id but I cannot
seem to get the filter right to find the group memberships by id. I
have no idea what the syntax should be. Here is what I have:

require filter "(&(groupmembership=ABC*))"

Can this be done? How do I find out if they are a member of a group if
there are many groups listed?

Have you tried:

require group cn=ABC, o=fpl

I haven't gotten LDAP talking to AD yet, but will need to do a similar
setup (restricting by group). If the line above doesn't work I will
repost once I get my system working. I think the live above will
create the correct filter for LDAP.

I am using
http://www.strategy.gov.sk/manual-2.....html#examples
for reference on this.

jaime wrote:
> I'm using the mod_auth_ldap with apache to attempt to block access to
a
> directory based on group membership. I've successfully bound to the
> active directory server and authenticated with my user id but I
cannot
> seem to get the filter right to find the group memberships by id. I
> have no idea what the syntax should be. Here is what I have:
>
> require filter "(&(groupmembership=ABC*))"
>
> Can this be done? How do I find out if they are a member of a group
if
> there are many groups listed?