{"action":"closed","issue":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/51","labels_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/51/labels{/name}","comments_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/51/comments","events_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/51/events","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/51","id":58485099,"number":51,"title":"Can not chain 2 verifications with    \"Require claim hd:domain.com\"  && \"Require ldap-group cn=...\"","user":{"login":"Nickos75","id":11141198,"avatar_url":"https://avatars.githubusercontent.com/u/11141198?v=3","gravatar_id":"","url":"https://api.github.com/users/Nickos75","html_url":"https://github.com/Nickos75","followers_url":"https://api.github.com/users/Nickos75/followers","following_url":"https://api.github.com/users/Nickos75/following{/other_user}","gists_url":"https://api.github.com/users/Nickos75/gists{/gist_id}","starred_url":"https://api.github.com/users/Nickos75/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Nickos75/subscriptions","organizations_url":"https://api.github.com/users/Nickos75/orgs","repos_url":"https://api.github.com/users/Nickos75/repos","events_url":"https://api.github.com/users/Nickos75/events{/privacy}","received_events_url":"https://api.github.com/users/Nickos75/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-22T01:28:57Z","updated_at":"2015-03-03T18:58:50Z","closed_at":"2015-03-03T18:58:50Z","body":"Hello,\r\n\r\nI use mod_auth_openidc on an Apache RP to secure access to the backend web server.\r\nI would like to make 2 verifications :\r\n\r\n1. Verify that the people who connects through openidc comes from my domain.com\r\n2. Verify that the people who connects through openidc is a member of a group of my LDAP\r\n\r\nI know how to verify 1. or 2., but cannot verify 1. and  2.\r\n\r\nHere is a part of my vhost:\r\n\r\n    <Location />\r\n     AuthType openid-connect\r\n     Require claim hd:domain.com\r\n \r\n      AuthLDAPURL \"ldap://ldap.domain.com:389/ou=Users,o=domain?mail?sub?(objectClass=person)(ISstatus=Active)\"\r\n      Require ldap-group cn=Group,ou=Applications,o=domain   \r\n\r\n      Satisfy All\r\n    </Location>\r\n\r\nWhen I set  `Require claim hd:domain.com` there is NO LDAP request...\r\nIf I set `Require valid-user` instead of `Require claim hd:domain.com`, the LDAP verification is working.\r\n\r\nIf someone could help me with this ...\r\n"}}