From 2c5b829fb07029e55bcea175cc75ea0a63a19019 Mon Sep 17 00:00:00 2001
From: James Valleroy <jvalleroy@mailbox.org>
Date: Tue, 30 Jun 2015 16:31:54 -0400
Subject: [PATCH] ikiwiki: Authorize users from admin or wiki group.

---
 data/etc/apache2/conf-available/ikiwiki-plinth.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/data/etc/apache2/conf-available/ikiwiki-plinth.conf b/data/etc/apache2/conf-available/ikiwiki-plinth.conf
index 5127ce162..a1fda86d6 100644
--- a/data/etc/apache2/conf-available/ikiwiki-plinth.conf
+++ b/data/etc/apache2/conf-available/ikiwiki-plinth.conf
@@ -13,5 +13,6 @@ AddHandler cgi-script .cgi
     AuthName "login required"
     AuthBasicProvider ldap
     AuthLDAPURL "ldap:///ou=users,dc=thisbox?uid"
-    Require valid-user
+    Require ldap-group cn=admin,ou=groups,dc=thisbox
+    Require ldap-group cn=wiki,ou=groups,dc=thisbox
 </Location>