title: Apache: require ldap group or htgroup membership
body: <p>I'm working on transitioning our users from htpasswd/htgroup auth to ldap.</p>
  
  <p>While this in progress, I want to allow Apache to authorise users from both ldap and htpasswd.</p>
  
  <p>I have the following in my config...</p>
  
  <pre><code>AuthBasicProvider ldap file
  
  AuthUserFile my_passwords
  AuthGroupFile my_groups
  
  AuthLDAPBindDN "CN=Bind User,OU=Users,DC=ad,DC=mydomain,DC=com"
  AuthLDAPURL "ldap://dir.mydomain.com/OU=Users,DC=ad,DC=mydomain,DC=com?sAMAccountName?sub?(objectClass=User)"
  </code></pre>
  
  <p>I'm not sure how to combine both require types...</p>
  
  <p>So basically I need to require either one of these...</p>
  
  <pre><code>Require ldap-group CN=MyGroup,OU=Users,DC=ad,DC=mydomain,DC=com
  </code></pre>
  
  <p>or</p>
  
  <pre><code>Require group MyGroup
  </code></pre>
  
  <p>If I use "Satisfy any", then the Requires are basically ignored. If I use "Satisfy all", then only the ldap-group membership works.</p>
  
  <p>Is there any way to get around this, so membership in either htgroups, or ldap groups works?</p>