如何配置 apache，以便只有来自 windows 服务器的一个组织单位可以访问该页面

Question

我正在尝试在 rocky linux 上的 apache 上配置 ldap，但我想只允许属于 Win 服务器的 ITGeral 组的用户访问该页面。我该如何配置？我将在这里保留我目前的配置

监听 41414 https <VirtualHost *:41414>

        ServerAdmin     [email protected]
        DocumentRoot    "/var/www/www.soitezes.local"
        Servername      www.soitezes.local
        ServerAlias     www.soitezes.local
        <Directory /var/www/www.soitezes.local>
                Options Indexes FollowSymlinks MultiViews
                AllowOverride none
                Order allow,deny
                Allow from all
                AuthType basic
                AuthBasicProvider ldap
                AuthName "Digite o username e a password como faz no login do windows"
                AuthUserFile "/dev/null"
                AuthLdapURL "ldap://10.48.70.1:389/DC=seunome,DC=local?sAMAccountName?sub?(objectClass=*)"
                AuthLdapBindDN "[email protected]"
                AuthLdapBindPassword    "Passw0rd"
                AuthLdapGroupAttribute on
                Require ldap-group CN=jcalhau,OU=Angola,DC=seunome,DC=local,DC=Formacao
        </Directory>

ErrorLog logs/www.soitezes.local_error_log
Transferlog logs/www.soitezes.local_access_log
LogLevel warn

SSLEngine on

SSLCertificateFile /etc/pki/tls/certs/www.soitezes.local.crt

SSLCertificateKeyFile /etc/pki/tls/private/www.soitezes.local.key

<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/var/www/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

BrowserMatch "MSIE [2-5]" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0