Re: LDAP Authorization from Apache

["Kent L. Nasveschuk" <kent@wareham.k12.ma.us>]

Kannan,
Just wondering what OS you have Apache installed on, the version and
whether you used a stock installation or did you compile from source to
get Apache to work with LDAP.

Thanks.


On Fri, 2004-01-02 at 02:56, Kannan Sivasankaran wrote:
> Hi
> I am tring to get my apache directory authenticated by LDAP.
> 
> In httpd.conf I wrote
> ----------------------------------------------------------------------------
> -------------------------------------------
> AuthType Basic
> AuthName LDAP
> AuthLDAPAuthoritative on
> AuthLDAPURL "ldap://10.10.1.125/ou=ustr_in,o=ustr?cn??(objectClass=*)"
> require valid-user
> ----------------------------------------------------------------------------
> ----------------------------------------------
> 
> I am getting the dialog box to enter username and password but I am not
> getting authenticated. When I checked the LDAP log I found that the username
> entered is not comming there in the request string to LDAP. I am getting
> string like this
> ----------------------------------------------------------------------------
> -------------------------------------------
> DSAResolveName conn:1 for client .tvmemail1.ustr.USTR_TREE.
> ----------------------------------------------------------------------------
> -------------------------------------------
> The "tvmemail1" stuff is the computer name which LDAP is running. Above is
> not the corect expected request string.
> 
> 
> 
> 
> But when I "hardcoded" my username and password in the httpd.conf file its
> getting authenticated. The dialog box for username and password entry also
> not appearing.
> This how I "hardcoded" my username and password
> ----------------------------------------------------------------------------
> -------------------------------------------
> AuthType Basic
> AuthName LDAP
> AuthLDAPAuthoritative on
> AuthLDAPURL "ldap://10.10.1.125/ou=ustr_in,o=ustr?cn??(objectClass=*)"
> AuthLDAPBindDN cn=A354T1200,ou=ustr_in,o=ustr
> AuthLDAPBindPassword helloall
> require valid-user
> ----------------------------------------------------------------------------
> ----------------------------------------------
> 
> When I checked the LDAP log I found the following string. This is correct
> format of request string that should reach LDAP.
> ----------------------------------------------------------------------------
> ---------------------------------------------------------------
> DSAResolveName conn:22 for client
> .A354T1200.USTR_IN.ustr.USTR_TREE.
> ----------------------------------------------------------------------------
> ----------------------------------------------------------------
> 
> 
> Anybody have any idea in the first case why the request string to LDAP
> server not getting correctly?
> 
> Also can anybody tell me what  conn:22 means in the above string, because
> when I checked the log I found that all correctly formed string has conn:22.
> But see my first request string it has conn:1. For non-correct strings the
> conn: number will differ like sometimes it will be conn:1 sometimes conn:2
> or conn:3 etc... But for all correct strings I can see conn:22 only.
-- 
Kent
nasve525@regis.edu
kent@wareham.k12.ma.us

Tips:---------------------------------------------->
"OpenOffice.org ... Stops Word macro viruses DEAD!"
"Postgresql.org ... Don't 'kill -9' the postmaster"
"Technology is legislation - C. Einfeldt on OO.o discuss list"