Compiling/installing: $ make $ make install Configuration of apache server (2.0.X): Add theses lines to httpd.conf: ----SNIP---- LoadModule ldap_module libexec/apache2/mod_ldap.so LoadModule auth_kerb_module libexec/apache2/mod_auth_kerb.so LoadModule auth_ldap_module libexec/apache2/mod_auth_ldap_ti.so ----SNIP---- Note that the kerberos line is only used if you want to authenticate users from Kerberos SSO. Now, you can configure per directory authentication/authorisation, here is an example for authorising AD users with group priviledges. ----SNIP---- TiLDAPConnectionTimeout 5 AllowOverride None Order allow,deny Allow from all AuthName "AD Login" AuthType Kerberos KrbAuthoritative off KrbDelegateBasic on Krb5Keytab "/usr/local/etc/apache2/hostofserv.keytab" KrbMethodK5Passwd on KrbMethodNegotiate on KrbAuthRealms MY.DOMAIN.COM KrbSaveCredentials on TiAuthLDAPURL "ldap://first.ldap.server.com second.ldap.server.com:3268/?userPrincipalName?sub?(objectClass=user)" TiAuthLDAPBindPassword Entery0uRpasswordH3r3 TiAuthLDAPBindDN cn=Loginforbind TiAuthLDAPAuthoritative On require group cn=Administrators ----SNIP---- The Ti prefix on each configuration keywords has been placed in case of mixing with the original mod_auth_ldap mod. This example take the case of a AD domains with multiple LDAP server, you can add both of them in the LDAPURL var separeted by spaces. And here it is... if you need more support/documentation, here are some usefull links: - http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html (Doc of original mod_auth_ldap) - http://httpd.apache.org/docs/2.0/mod/mod_ldap.html (Doc of mod_ldap) - http://modauthkerb.sourceforge.net/ (Homepage of mod_auth_kerb)