Apache authz

Hi All,

I have configured my Apache HTTP Server to authenticate users using SSL certificates and to forward the CN of the user from the certificate in the HTTP header to the backend server.

The server config also does a look up in Active Directory to make sure the user exists and to perform some basic authz (e.g. the user is in a particular group).

Is it possible to retrieve the user's group/role memberships from AD and forward these to the backend server in an HTTP header? Any pointers please?

Many thanks
Simon