Apache with LDAP (MS AD) auth*

a2enmod authnz_ldap
a2enmod ldap

cat /etc/apache2/sites-enabled/site
<Location /site/secure>
AuthBasicProvider ldap
AuthType Basic
AuthzLdapAuthoritative off
AuthName "LDAP/ActiveDirectory Authentication"
AuthLDAPBindDN ldapbind@domain.ltd
AuthLDAPBindPassword QXBPzp5yVo1Ed3
AuthLDAPURL
"ldap://ldap.domain.ltd:3268/DC=domain,DC=ltd?sAMAccountName?sub?(objectClass=*)" NONE
# ldap://ldap.domain.ltd:3268 -- in case ldap.domain.ltd is a GlobalCatalog
# ldap://ldap.domain.ltd:389 -- in case ldap.domain.ltd is not
Require valid-user
Require ldap-group CN=ldap-web-users,CN=Users,DC=domain,DC=ltd
</Location>

<Directory /var/www/site>
Options ExecCGI FollowSymLinks
AllowOverride None
Options None
Order allow,deny
Allow from all
</Directory>

apache2ctl restart

Лайк а баус! :)