Alias /wiki/ /home/wiki-{{ sublab_web_server_name }}/wiki-html/ AllowOverride None Require all granted AddHandler cgi-script .cgi Options +ExecCGI AuthType basic AuthBasicProvider ldap AuthName "LDAP Login" AuthLDAPBindDN "cn=apache-{{ ansible_nodename }},ou=service,dc=sublab,dc=org" AuthLDAPBindPassword "{{ ldap_credentials["apache-" + ansible_nodename] }}" AuthLDAPURL "{{ ldap_url }}/ou=people,dc=sublab,dc=org" # AuthzLDAPAuthoritative on # Require ldap-group cn=members,ou=groups,dc=sublab,dc=org Require valid-user LDAPTrustedMode TLS