DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21787>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21787 LDAP authentication failure does not recover properly Summary: LDAP authentication failure does not recover properly Product: Apache httpd-2.0 Version: 2.0.47 Platform: PC OS/Version: Other Status: NEW Severity: Critical Priority: Other Component: mod_auth_ldap AssignedTo: [email protected] ReportedBy: [EMAIL PROTECTED] I am using the ldap module to connect to a IBM SecureWay LDAP for my DAV area. Here is my configuration parameters: <Location /webdocs> Dav On AuthType Basic AuthName DAV AuthLDAPEnabled on AuthLDAPURL "ldap://myldap.fritolay.pvt/ou=people,dc=pepsico,dc=com"; AuthLDAPBindDN "uid=xxxxxx,ou=agents,dc=pepsico,dc=com" AuthLDAPBindPassword "xxxxxxx" #AuthUserFile user.passwd AllowOverride None Options None <LimitExcept GET OPTIONS> require valid-user </LimitExcept> </Location> I am able to connect one time. As long as I enter a valid ID/password I am fine. But when I put in a bas password, it fails, but then fails consistently afterwards even with a valid password. Here are the log entries: [Mon Jul 21 19:43:31 2003] [debug] mod_auth_ldap.c(343): [client 156.81.28.142] [4344] auth_ldap authenticate: using URL ldap://replicas.ldapdfw.fritolay.pvt/ou=people,dc=pepsico,dc=com [Mon Jul 21 19:43:31 2003] [debug] mod_auth_ldap.c(418): [client 156.81.28.142] [4344] auth_ldap authenticate: accepting dwietzel [Mon Jul 21 19:43:31 2003] [debug] mod_auth_ldap.c(537): [client 156.81.28.142] [4344] auth_ldap authorise: successful authorisation because user is valid-user [Mon Jul 21 19:44:00 2003] [debug] mod_auth_ldap.c(343): [client 156.81.28.142] [4344] auth_ldap authenticate: using URL ldap://replicas.ldapdfw.fritolay.pvt/ou=people,dc=pepsico,dc=com [Mon Jul 21 19:44:00 2003] [debug] mod_auth_ldap.c(348): [client 156.81.28.142] [4344] auth_ldap authenticate: ap_get_basic_auth_pw() returns 401 [Mon Jul 21 19:44:00 2003] [debug] mod_auth_ldap.c(343): [client 156.81.28.142] [4344] auth_ldap authenticate: using URL ldap://replicas.ldapdfw.fritolay.pvt/ou=people,dc=pepsico,dc=com [Mon Jul 21 19:44:00 2003] [warn] [client 156.81.28.142] [4344] auth_ldap authenticate: user dwietzel authentication failed; URI /webdocs [ldap_simple_bind_s() to check user credentials failed][Invalid Credentials] [Mon Jul 21 19:44:05 2003] [debug] mod_auth_ldap.c(343): [client 156.81.28.142] [4344] auth_ldap authenticate: using URL ldap://replicas.ldapdfw.fritolay.pvt/ou=people,dc=pepsico,dc=com [Mon Jul 21 19:44:05 2003] [debug] mod_auth_ldap.c(348): [client 156.81.28.142] [4344] auth_ldap authenticate: ap_get_basic_auth_pw() returns 401 [Mon Jul 21 19:44:05 2003] [debug] mod_auth_ldap.c(343): [client 156.81.28.142] [4344] auth_ldap authenticate: using URL ldap://replicas.ldapdfw.fritolay.pvt/ou=people,dc=pepsico,dc=com [Mon Jul 21 19:44:05 2003] [warn] [client 156.81.28.142] [4344] auth_ldap authenticate: user dwietzel authentication failed; URI /webdocs [User not found][No Such Object] [Mon Jul 21 19:44:06 2003] [debug] mod_auth_ldap.c(343): [client 156.81.28.142] [4344] auth_ldap authenticate: using URL ldap://replicas.ldapdfw.fritolay.pvt/ou=people,dc=pepsico,dc=com [Mon Jul 21 19:44:06 2003] [debug] mod_auth_ldap.c(348): [client 156.81.28.142] [4344] auth_ldap authenticate: ap_get_basic_auth_pw() returns 401 [Mon Jul 21 19:44:06 2003] [debug] mod_auth_ldap.c(343): [client 156.81.28.142] [4344] auth_ldap authenticate: using URL ldap://replicas.ldapdfw.fritolay.pvt/ou=people,dc=pepsico,dc=com [Mon Jul 21 19:44:06 2003] [warn] [client 156.81.28.142] [4344] auth_ldap authenticate: user dwietzel authentication failed; URI /webdocs [User not found][No Such Object] Everytime after the failure it looks as though I get a [No Such Object]. Dave Wietzel --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
