Re: [EMAIL PROTECTED] LDAP group limits?

2008-11-04 Thread Eric Covener
On Tue, Nov 4, 2008 at 1:25 PM, Tony Rice (trice) <[EMAIL PROTECTED]> wrote: > Are there any limits to the number of groups the LDAP module can handle > a particular user being a member of? When you "require ldap-group foo", it searches for the user in group foo. I don't think other groups should

[EMAIL PROTECTED] LDAP group limits?

2008-11-04 Thread Tony Rice (trice)
Are there any limits to the number of groups the LDAP module can handle a particular user being a member of? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html>

Re: [EMAIL PROTECTED] LDAP hangs when trying to authenticate

2008-11-02 Thread Mike Benza
Well, I've solved this problem with a lot of help. The issue is that Apache's mod_ldap is ignoring "LDAPVerifyServerCert Off" I had to replace that with: LDAPTrustedMode SSL LDAPVerifyServerCert On LDAPTrustedGlobalCert CA_BASE64 /etc/ssl/certs/Thawte_Premium_Server_CA.pem (if you have the

Re: [EMAIL PROTECTED] LDAP hangs when trying to authenticate

2008-10-21 Thread Tod
Mike Benza wrote: I can't figure out how ldapsearch is connecting -- either via LDAP or LDAPS. I'm so confused. Here's what I ran: ldapsearch -x -W -D "cn=ewb,ou=service accounts,dc=rice,dc=edu" -b "ou=People,dc=rice,dc=edu" '(uid=XYZ)' -h ldap.rice.edu I don't kno

Re: [EMAIL PROTECTED] LDAP hangs when trying to authenticate

2008-10-20 Thread Mike Benza
I can't figure out how ldapsearch is connecting -- either via LDAP or LDAPS. I'm so confused. Here's what I ran: ldapsearch -x -W -D "cn=ewb,ou=service accounts,dc=rice,dc=edu" -b "ou=People,dc=rice,dc=edu" '(uid=XYZ)' -h ldap.rice.edu I don't know if it's connecting with ldap or ldaps...If I

Re: [EMAIL PROTECTED] LDAP hangs when trying to authenticate

2008-10-20 Thread Tod
Mike Benza wrote: I did try that. It works fine. Did you try performing the same tests on port 389? Just wondering if your Apache SSL setup might be contributing to your troubles. - The official User-To-User support fo

Re: [EMAIL PROTECTED] LDAP hangs when trying to authenticate

2008-10-20 Thread Mike Benza
I did try that. It works fine. Tod wrote: Try doing the ldapsearch from the apache box to ldap.rice.edu to rule out firewall a issue. - The official User-To-User support forum of the Apache HTTP Server Project. See http:/

Re: [EMAIL PROTECTED] LDAP hangs when trying to authenticate

2008-10-20 Thread Tod
Mike Benza wrote: Hello, I've been stuck with a problem where LDAP hangs when it's trying to authenticate. I'm running Apache on Ubuntu 8.04, Hardy Heron. This problem occurs with the Ubuntu version (both 32 and 64 bit) as well as compiled directly from source. I can produce the problem

[EMAIL PROTECTED] LDAP hangs when trying to authenticate

2008-10-19 Thread Mike Benza
Hello, I've been stuck with a problem where LDAP hangs when it's trying to authenticate. I'm running Apache on Ubuntu 8.04, Hardy Heron. This problem occurs with the Ubuntu version (both 32 and 64 bit) as well as compiled directly from source. I can produce the problem in Apache 2.2.8 (from Ub

[EMAIL PROTECTED] LDAP authentication - search depth

2008-09-17 Thread parminder gupta
Hello, I am trying to get my Apache/Subversion server running on Linux authenticate users on Windows Active Directory using LDAP. Server information is as below: Apache: 2.2.3 Subversion: 1.5.1 Linux: CentOS 5.2 (kernel 2.6.18-92.1.10.el5) The LDAP structure of my company looks like below: DC=ex

RE: [EMAIL PROTECTED] LDAP authentication against an Active Directory server

2008-05-20 Thread David Dyer-Bennet
Eric Covener [mailto:[EMAIL PROTECTED] wrote: > On Mon, May 19, 2008 at 7:14 PM, David Dyer-Bennet > <[EMAIL PROTECTED]> wrote: > > > > > Then I see *another* search for the same user record, which > > fails with > > an error saying a bind must be done first ("errorMessage: : > > LdapEr

Re: [EMAIL PROTECTED] LDAP authentication against an Active Directory server

2008-05-19 Thread Eric Covener
On Mon, May 19, 2008 at 7:14 PM, David Dyer-Bennet <[EMAIL PROTECTED]> wrote: > > Then I see *another* search for the same user record, which fails with > an error saying a bind must be done first ("errorMessage: : > LdapErr: DSID-0C090627, comment: In order to perform this operation a > s

[EMAIL PROTECTED] LDAP authentication against an Active Directory server

2008-05-19 Thread David Dyer-Bennet
I seem to have a somewhat different problem than the ones I find all over forums and archives (needing an address to bind to to search for the user). I'm running Apache httpd 2.0.52 on CENTOS 4.6 (Final). The Active Directory server is on Windows 2003 Server. I'm trying to authenticate acces

Re: [EMAIL PROTECTED] ldap authentication

2008-05-09 Thread syed mehdi
Hi Krist, i tried to access user name (who have authenticated via LDAP) using the variable REMOTE_USER in python like: if request.environ.has_key('REMOTE_USER'): name = request.environ['REMOTE_USER'] print name but it gave an exception, any clue by any other user also? Thanks & Regards

Re: [EMAIL PROTECTED] ldap authentication

2008-05-09 Thread syed mehdi
i tried to access user name (who have authenticated via LDAP) using the variable REMOTE_USER in python like: print REMOTE_USER but it gave an exception Thanks & Regards syed On Wed, Apr 23, 2008 at 5:15 PM, Krist van Besien <[EMAIL PROTECTED]> wrote: > On Wed, Apr 23, 2008 at 7:00 AM, syed mehdi

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-24 Thread Krist van Besien
On Wed, Apr 23, 2008 at 5:01 PM, Jess Holle <[EMAIL PROTECTED]> wrote: > > Krist van Besien wrote: > > > If you're wed to AD and have a stupid password change policy > (Sarbannes-Oxley is inane in this regard -- this just encourages > lower-quality passwords, writing down passwords, etc -- and ap

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-23 Thread Jess Holle
Krist van Besien wrote: If you're wed to AD and have a stupid password change policy (Sarbannes-Oxley is inane in this regard -- this just encourages lower-quality passwords, writing down passwords, etc -- and appears to have been little more than corporate welfare for security/IT consulting com

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-23 Thread Krist van Besien
On Wed, Apr 23, 2008 at 4:03 PM, Jess Holle <[EMAIL PROTECTED]> wrote: > > Both Apache 2 and 2.2 work with LDAPs that disallow anonymous access, > including AD, though you really need 2.2 for things to fully work as AD will > close idle LDAP connections and 2.0 can't handle its connections being >

Re: [EMAIL PROTECTED] ldap authentication

2008-04-23 Thread Danie Qian
- Original Message - From: "Krist van Besien" <[EMAIL PROTECTED]> To: Sent: Wednesday, April 23, 2008 7:45 AM Subject: Re: [EMAIL PROTECTED] ldap authentication On Wed, Apr 23, 2008 at 7:00 AM, syed mehdi <[EMAIL PROTECTED]> wrote: When a user authenticates us

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-23 Thread Jess Holle
Both Apache 2 and 2.2 work with LDAPs that disallow anonymous access, including AD, though you really need 2.2 for things to fully work as AD will close idle LDAP connections and 2.0 can't handle its connections being closed behind its back, whereas 2.2 can. You do have to specify full DN and

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-23 Thread Krist van Besien
On Wed, Apr 23, 2008 at 3:05 PM, Harry Holt <[EMAIL PROTECTED]> wrote: > Well... that was my assumption. But looking at the trace, it is in fact > performing an anonymous search before attempting the bind. Maybe it's > possible to specify a fully qualified DN and avoid the search, I don't know.

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-23 Thread Harry Holt
On Wed, Apr 23, 2008 at 7:55 AM, Krist van Besien <[EMAIL PROTECTED]> wrote: > On Tue, Apr 22, 2008 at 3:27 PM, Harry Holt <[EMAIL PROTECTED]> wrote: > > > Yes, it works. Try adding > > > > AuthBasicProvider ldap > > What works? Do you mean that under apache 2.2 is is finally possible > to do lda

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-23 Thread imarinkrat1
Harry Holt wrote: > > On Tue, Apr 22, 2008 at 9:18 AM, imarinkrat1 <[EMAIL PROTECTED]> > wrote: > >> >> >> This is my current configuration which works correctly: >> >> DAV svn >> SVNParentPath C:\svn-9242 >> SVNListParentPath on >> SSLRequireSSL >> >> AuthType Basic >> AuthName "Team 92

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-23 Thread Krist van Besien
On Tue, Apr 22, 2008 at 3:27 PM, Harry Holt <[EMAIL PROTECTED]> wrote: > Yes, it works. Try adding > > AuthBasicProvider ldap What works? Do you mean that under apache 2.2 is is finally possible to do ldap authentication without putting a BindDN and Password in your httpd.conf, and without allow

Re: [EMAIL PROTECTED] ldap authentication

2008-04-23 Thread Krist van Besien
On Wed, Apr 23, 2008 at 7:00 AM, syed mehdi <[EMAIL PROTECTED]> wrote: > When a user authenticates using LDAP user/paswd to execute a script placed > at server, then how can the script determine which user have executed it > (after authentication). By this we can keep track of users making changes

Re: [EMAIL PROTECTED] ldap authentication

2008-04-23 Thread syed mehdi
ok if i have to do it on application side, then how can i determine which user have authenticated. regards syed On Wed, Apr 23, 2008 at 1:24 PM, Mohammed Salih <[EMAIL PROTECTED]> wrote: > Why don't you do this in Application side, Where you can have better > control over what you do. > > Cheers

Re: [EMAIL PROTECTED] ldap authentication

2008-04-23 Thread Mohammed Salih
Why don't you do this in Application side, Where you can have better control over what you do. Cheers Salih On Wed, Apr 23, 2008 at 9:00 AM, syed mehdi <[EMAIL PROTECTED]> wrote: > When a user authenticates using LDAP user/paswd to execute a script placed > at server, then how can the script dete

[EMAIL PROTECTED] ldap authentication

2008-04-22 Thread syed mehdi
When a user authenticates using LDAP user/paswd to execute a script placed at server, then how can the script determine which user have executed it (after authentication). By this we can keep track of users making changes in database otherwise any user can make changes anywhere and it will be in a

Re: [EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-22 Thread Harry Holt
On Tue, Apr 22, 2008 at 9:18 AM, imarinkrat1 <[EMAIL PROTECTED]> wrote: > > I would like to be able to bind to my Ldap server using the username and > password passed in from the user trying to access this directory. Due the > current configuration of my Ldap server, I am unable to do an annonymou

[EMAIL PROTECTED] Ldap Bind (w/ mod_auth_ldap)

2008-04-22 Thread imarinkrat1
I would like to be able to bind to my Ldap server using the username and password passed in from the user trying to access this directory. Due the current configuration of my Ldap server, I am unable to do an annonymous bind, and apparently, it's not secure to hardcode my username and password int

Re: [EMAIL PROTECTED] ldap/ AD user authentication error

2008-02-25 Thread Krist van Besien
On Mon, Feb 25, 2008 at 5:06 AM, Chris <[EMAIL PROTECTED]> wrote: > I did a tcpdump and can see packets going to the AD end but nothing is > coming back. Have you checked if you can use the AD server? Try authenticating against it using an ldap command line client. > AuthName "Test" > AuthTyp

[EMAIL PROTECTED] ldap/ AD user authentication error

2008-02-24 Thread Chris
I am trying to get Apache 2.2.4 on OpenSUSE 10.3 working with Active Directory (AD) LDAP authentication for users. But everytime I try to login I get a 403 error. I have ldap_module and authnz_ldap_module enabled. And I am trying over both HTTP and HTTPS but the password prompt comes back asking fo

[EMAIL PROTECTED] ldap unavailable 500 server error

2007-12-20 Thread Thomas Hart
Hello everybody. I'm sure some of you are at least somewhat familiar with the bug here: http://issues.apache.org/bugzilla/show_bug.cgi?id=39095 If you're not, the basic theory is that if there's not an auth call to the ldap server for 10 minutes, the server will return the wrong message. Here'

Re: [EMAIL PROTECTED] ldap authentication not working

2007-10-06 Thread Krist van Besien
On 10/4/07, Tom Hart <[EMAIL PROTECTED]> wrote: > I'm beginning to believe that the BindDN and BindPassword are incorrect, > because it doesn't seem to matter what I type in there, I get the same > results. I'm pretty sure I have the DN correct though. > > We have an apache service account (account

Re: [EMAIL PROTECTED] ldap authentication not working

2007-10-04 Thread Tom Hart
It works! For the record here's my final setup. I'm using Apache 2.2.x and mod_authnz_ldap with Windows 2003 Server Options Indexes FollowSymLinks AllowOverride None Order deny,allow AuthType Basic AuthName "Testing LDAP Auth" AuthBasicProvider ldap #AuthLDAPAuthorita

Re: [EMAIL PROTECTED] ldap authentication not working

2007-10-04 Thread Tom Hart
I'm beginning to believe that the BindDN and BindPassword are incorrect, because it doesn't seem to matter what I type in there, I get the same results. I'm pretty sure I have the DN correct though. We have an apache service account (account name is cu_apache) in the Users container under our

Re: [EMAIL PROTECTED] ldap authentication not working

2007-10-04 Thread Tom Hart
Re: [EMAIL PROTECTED] ldap authentication not working As a follow-up I realized ldap-user is used to specifiy a certain user aka ldap-user "Joe Smith". However based on the fact that I'm not getting prompted for a u/p, and AuthLDAPAuthoritative is failing, I believe my problem lies deeper t

Re: [EMAIL PROTECTED] ldap authentication not working

2007-10-04 Thread Tom Hart
Ok, I'm getting a bit closer. Here's what I have now. Options Indexes FollowSymLinks AllowOverride None Order deny,allow AuthType Basic AuthName "Testing LDAP Auth" AuthBasicProvider ldap #AuthLDAPAuthoritative on - still doesn't let apache start AuthLDAPUrl "ldap:/

Re: [EMAIL PROTECTED] ldap authentication not working

2007-10-04 Thread Peter Milanese
What version are you running? Are you using mod_authnz_ldap? - Original Message From: Tom Hart <[EMAIL PROTECTED]> To: users@httpd.apache.org Sent: Thursday, October 4, 2007 10:40:16 AM Subject: Re: [EMAIL PROTECTED] ldap authentication not working As a follow-up I realized lda

Re: [EMAIL PROTECTED] ldap authentication not working

2007-10-04 Thread Tom Hart
As a follow-up I realized ldap-user is used to specifiy a certain user aka ldap-user "Joe Smith". However based on the fact that I'm not getting prompted for a u/p, and AuthLDAPAuthoritative is failing, I believe my problem lies deeper than that. I could be wrong of course, just trying to narro

[EMAIL PROTECTED] ldap authentication not working

2007-10-04 Thread Tom Hart
Hi everybody. Thanks to the help of this list I managed to get the auth_ldap module loaded, but now I'm having a little trouble bringing this project to full fruition. I'm not sure which part of this is failing, and unfortunately I can't seem to find where I can see any type of log info about

[EMAIL PROTECTED] ldap group problems

2007-07-11 Thread Sean Davis
httpd v2.2.4 from source on macos 10.4.9 I have a configuration like this. In the first case using require valid-user, everything works as expected. I can authenticate users just fine. However, when I use the second Location block, I have problems and cannot authorize against the group. Any su

Re: [EMAIL PROTECTED] LDAP / Active Directory Authentication problem.

2007-05-07 Thread Christophe BOULAIN
Nobody can help me ? Nobody else has this problem ? I can't imagine that's an apache bug :) Should I ask my users not to use special chars in their password ? :( Thanks Christophe BOULAIN a écrit : Hi Anybody has an idea for my problem ? I tried ti sniff ldap packets, and I noticed that apac

Re: [EMAIL PROTECTED] LDAP / Active Directory Authentication problem.

2007-04-23 Thread Christophe BOULAIN
Hi Anybody has an idea for my problem ? I tried ti sniff ldap packets, and I noticed that apache does not encode the password in UTF-8 : a 'é' in password is encode E9 (iso code), and when I try the same thing with LDAPSEARCH, the same letter is encoded C3E9 (utf-8 code) Is this relative to mod_l

[EMAIL PROTECTED] LDAP / Active Directory Authentication problem.

2007-04-18 Thread Christophe BOULAIN
Hi, I am trying to set up a reverse authenticated proxy for an internal site of my company. The authentication is done on a Microsoft Active Directory Everything works almost fine, but I'm running into problem when users has special chars (ex accentued letters) in their password. They are rejected

Re: [EMAIL PROTECTED] ldap-attribute wildcard not working?

2007-04-17 Thread John P. Dodge
On Thu, 5 Apr 2007, Bruce DeYoung wrote: > We have an attribute in our LDAP directory called "groupmembership". Due > to some issues in our back-end Notes/Domino database, values for > groupmembership are like "Employee 1", "Employee 2", "Employee 3", > etc.but each of these is essentially the

[EMAIL PROTECTED] ldap-attribute wildcard not working?

2007-04-05 Thread Bruce DeYoung
Hello, We are moving from Apache 1.3 (Solaris) to Apache 2.2.3 (Redhat). We are trying to leverage the new functionality in the mod_authnz_ldap module to authenticate/authorize users visting our support site. I have the authentication piece working and am now trying to authorize access to ce

[EMAIL PROTECTED] LDAP authentication against AD

2007-03-15 Thread Dave Hartburn
Hi, Can anyone advise on a problem I have authenticating Apache on Linux against an Active Directory server? I can not authenticate for all users in the domain, only users in specific branches. I've found a few resources on line that suggest the following config is correct: LoadModule ldap_module

RE: [EMAIL PROTECTED] LDAP Authentication & Registration

2007-02-14 Thread Mark Lavi
lto:[EMAIL PROTECTED] Sent: Tuesday, February 13, 2007 9:35 AM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] LDAP Authentication & Registration OK do you all know of any application where a user can do a self-registration and it will create their account within the LDAP server? Thanks,

[EMAIL PROTECTED] LDAP Authentication & Registration

2007-02-13 Thread Strader, William A.
OK do you all know of any application where a user can do a self-registration and it will create their account within the LDAP server? Thanks, Billy Strader WebPool WebPool Pager: 865-417-5622 Work: 865-425-5178 Pager: 865-417-5012 ---

[EMAIL PROTECTED] LDAP

2007-01-03 Thread Gayal
It's just a misunderstanding i'm having. When implementing Active Directory access with LDAP, do i need to run both Apache and LDAP server on the same machine? At the moment i am having 3 boxes running Apache, Win2003Server as the LDAP server and WinXP as the client browser. -- Gayal Rupasinghe S

Re: [EMAIL PROTECTED] LDAP Debug

2006-12-22 Thread Davide Bianchi
Fábio Coelho wrote: How to debug ldap searches? Turn logging on in the ldap server and look at the logs Davide -- When all you have is a Swiss Army Knife, every problem looks like email. -- Peter da Silva - The official User-

[EMAIL PROTECTED] LDAP Debug

2006-12-22 Thread Fábio Coelho
How to debug ldap searches? LDAP_Debug on is not recognized by my apche []'s by qoelheX - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To

Re: [EMAIL PROTECTED] LDAP Authentication error

2006-10-24 Thread Om
Thanks for the help. My problem was solved, when i have added the directive "AuthzLDAPAuthoritative off" Now i am able to authenticate with LDAP. Is it mandatory to add the "AuthBasicProvider ldap" Thanks, Om. On 24-Oct-06, at 7:02 PM, Kenneth Svee wrote: [ Om ] Hi, I have installed apac

Re: [EMAIL PROTECTED] LDAP Authentication error

2006-10-24 Thread Kenneth Svee
[ Om ] > Hi, > I have installed apache 2.2.2 in my local machine. I am using in > built LDAP server on a MAC OS X server. I want to provide access to > few resources on the webserver authenticated against LDAP. mod_ldap > and mod_authnz_ldap modules are enabled in apache. > > Below is the Authoriz

[EMAIL PROTECTED] LDAP Authentication error

2006-10-24 Thread Om
Hi, I have installed apache 2.2.2 in my local machine. I am using in built LDAP server on a MAC OS X server. I want to provide access to few resources on the webserver authenticated against LDAP. mod_ldap and mod_authnz_ldap modules are enabled in apache. Below is the Authorization code that i

Re: [EMAIL PROTECTED] ldap error configuration error: couldn't check user. No user file?: /

2006-10-18 Thread Ramesh Patel
hey Joshua,     Thanks for the pointing that outI have to make sure to read the httpd docs really slowly next time around.  Also i fixed the issue of it not accepting my password,     i needed AuthzLDAPAuthoritative off instead of AuthLDAPAuthoritative off       thanks and cheers      

Re: [EMAIL PROTECTED] ldap error configuration error: couldn't check user. No user file?: /

2006-10-18 Thread Joshua Slive
On 10/18/06, Ramesh Patel <[EMAIL PROTECTED]> wrote: thanks joshua... its weird how it worked for me on the FC2 box without that statement and also the http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html does not indicate anything about AuthBasicProvider. Check the line: "When using mod_

Re: [EMAIL PROTECTED] ldap error configuration error: couldn't check user. No user file?: /

2006-10-18 Thread Ramesh Patel
thanks joshua...   its weird how it worked for me on the FC2 box without that statement and also the http://httpd.apache.org/docs/2.2/mod/mod_authnz_ldap.html does not indicate anything about AuthBasicProvider.  I added the line above but it keeps denying my username and password.  Any ideas?    

Re: [EMAIL PROTECTED] ldap error configuration error: couldn't check user. No user file?: /

2006-10-18 Thread Joshua Slive
On 10/18/06, Ramesh Patel <[EMAIL PROTECTED]> wrote: [Tue Oct 17 11:54:42 2006] [crit] [client ] configuration error: couldn't check user. No user file?: / You need: AuthBasicProvider ldap Joshua. - The official Us

[EMAIL PROTECTED] ldap error configuration error: couldn't check user. No user file?: /

2006-10-18 Thread Ramesh Patel
hello     I have the following in my httpd.conf file for a paritcular virtual host for ldap authentication via my domain controller   I have modified the username and password for security reasons         AuthName "Protected Site"    AuthType Basic     AuthLDAPURL ldap://xxx.xxx.xxx:389/c

[EMAIL PROTECTED] LDAP support apache 2.2.3 - solution compiling

2006-10-17 Thread s k
Dear Julien Garet,Problem mail ref:: http://mail-archives.apache.org/mod_mbox/httpd-users/200609.mbox/browser 1. First compile apr-util module with "--with-ldap" option"./configure --prefix=/home/openldap/apr-util/ --with-ldap --with-ldap-include=/home/openldap/Install/include --with-ldap-lib=/home

[EMAIL PROTECTED] LDAP support apache 2.2.3 - problem compiling

2006-09-29 Thread Julien Garet
Hello, I am currently trying to set up an apache server. Due to some constraints, I am trying to build it from sources, what I am not really used to. But I am near to the end... One last thing doesn't compile : ldap support. I am running a Mandriva 2006, with apr-util v 1.1.1 shipped.

Re: [EMAIL PROTECTED] ldap to ldaps under httpd-2.2

2006-09-28 Thread Ricardo Stella
Looks good... I'm not sure - you might want to debug it by running the ldapsearch client from the command line. My guess is there's something going on with stunnel not accepting the connections. Is it logging anything ? Stuart Kendrick wrote: > hi ricardo, > > ok, what you're pointing out is th

Re: [EMAIL PROTECTED] ldap to ldaps under httpd-2.2

2006-09-26 Thread Stuart Kendrick
hi ricardo, ok, what you're pointing out is that i've been fuzzing whether or not i want to negotiate SSL after establishing a connection or if i just want to walk in assuming SSL my LDAP server is an Active Directory box with stunnel running on port 12389 (and redirecting what it receives t

Re: [EMAIL PROTECTED] ldap to ldaps under httpd-2.2

2006-09-26 Thread Ricardo Stella
Stuart Kendrick wrote: > hi, > > i'm trying to upgrade my ldap authentication to ldaps > > i have both ldap and ldaps authentication working under apache 2.0 ... > but under apache 2.2, i only have plain ldap working > > i'm looking for tips on additional trouble-shooting methods i could try > >

[EMAIL PROTECTED] ldap to ldaps under httpd-2.2

2006-09-25 Thread Stuart Kendrick
hi, i'm trying to upgrade my ldap authentication to ldaps i have both ldap and ldaps authentication working under apache 2.0 ... but under apache 2.2, i only have plain ldap working i'm looking for tips on additional trouble-shooting methods i could try here's my apache 2.0 config. this is

[EMAIL PROTECTED] ldap auth / empty connections

2006-09-13 Thread Stuart Kendrick
hi, i have a variant on the 'upgrading from apache 2.0 to 2.2, ldap authentication doesn't work' theme. i can see my apache server contact my ldap server ... but it doesn't perform a look-up, it just closes the connection and then re-opens it ... a handful of times, before logging a message c

RE: [EMAIL PROTECTED] LDAP authentication to dav folder

2006-08-29 Thread Craig Jackson
-Original Message- From: Craig Jackson [mailto:[EMAIL PROTECTED] Sent: Monday, August 28, 2006 5:02 PM To: users@httpd.apache.org Subject: [EMAIL PROTECTED] LDAP authentication to dav folder Samba with ldap backend authenticates samba users. An ldif example for a user looks like this

[EMAIL PROTECTED] LDAP authentication to dav folder

2006-08-28 Thread Craig Jackson
Samba with ldap backend authenticates samba users. An ldif example for a user looks like this: dn: uid=craig,ou=users,dc=abbott-simses,dc=com uid: craig sambaSID: sid id sambaPrimaryGroupSID: grp id displayName: Samba User objectClass: sambaSamAccount objectClass: account structuralObjectClass: ac

RE: [EMAIL PROTECTED] LDAP auth: Internal Server Error

2006-08-04 Thread Declerck Michael-W30479
ecial LDAP sertifiacte that I need for this to work? -Original Message- From: Mika Borner [mailto:[EMAIL PROTECTED] Sent: Friday, August 04, 2006 9:11 AM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] LDAP auth: Internal Server Error >I downloaded ans installed OpenLDAP v2.3

RE: [EMAIL PROTECTED] LDAP auth: Internal Server Error

2006-08-04 Thread Declerck Michael-W30479
errors do not seem to point to an SDK issue. But my inexperience with Apache preceeds me. -Original Message- From: Mika Borner [mailto:[EMAIL PROTECTED] Sent: Friday, August 04, 2006 9:11 AM To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] LDAP auth: Internal Server Error &g

Re: [EMAIL PROTECTED] LDAP auth: Internal Server Error

2006-08-04 Thread Paul Ortman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mika Borner wrote: >> I downloaded ans installed OpenLDAP v2.3.24 from source. I'm not sure > if >> that came with an SDK... >> I don't see any SDK's on the OpenLDAP download website. >> Where could I get an SDK? > > I haven't touched OpenLDAP lately

RE: [EMAIL PROTECTED] LDAP auth: Internal Server Error

2006-08-04 Thread Mika Borner
>I downloaded ans installed OpenLDAP v2.3.24 from source. I'm not sure if >that came with an SDK... >I don't see any SDK's on the OpenLDAP download website. >Where could I get an SDK? I haven't touched OpenLDAP lately, but I guess it is somewhere in the source tree of the tar-ball. For our novel

RE: [EMAIL PROTECTED] LDAP auth: Internal Server Error

2006-08-04 Thread Declerck Michael-W30479
006 12:29 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] LDAP auth: Internal Server Error Hi. >I get a authentication pop-up box from the LDAP server. >After I authenticate, however, I get an Internal Server Error on the >page and these two errors in my error log: I fou

Re: [EMAIL PROTECTED] LDAP auth: Internal Server Error

2006-08-03 Thread Mika Borner
Hi. >I get a authentication pop-up box from the LDAP server. >After I authenticate, however, I get an Internal Server Error on the >page and these two errors in my error log: I found that several internal server errors come from using a wrong LDAP SDK. Are you sure your apache instance's included

[EMAIL PROTECTED] LDAP auth: Internal Server Error

2006-08-03 Thread Declerck Michael-W30479
I want to allow only certain users to authenticate themselves against an LDAP server. This authentication is only for a folder on my document root. I am using Apache2.2.2. I get a authentication pop-up box from the LDAP server. After I authenticate, however, I get an Internal Server Error on the p

[EMAIL PROTECTED] LDAP Authentication Failure Gives 500 Error

2006-05-18 Thread Tribley William-cwt010
Apache 2.2.2 on Windows I only want to authenticate using LDAP. I have configured the server and it properly authenticates using LDAP. Configuration of the directory and the list of all installed modules is below. The issue comes when the user does not enter the proper credentials. Not differentiat

[EMAIL PROTECTED] LDAP on Apache 2 or PHP?

2006-05-05 Thread Gallardo, Lisa
Hi, I would like to connect to active directory using ldap. I'm a bit confused about the configuration though. If I use an apache module will this allow you to connect to AD in all applications or do you have to set it up for PHP, ASP as well? So you'd have it configured in Apache for stra

Re: [EMAIL PROTECTED] LDAP authentification from 2.0 to 2.2

2006-04-24 Thread Falko Zurell
Hello Matteo,I think you got two errors in your configuration:Require valid-usermust beRequire ldap-user if you use LDAP-Authentication.And since Apache 2.2.0 You have to tell apache which basic provider to use:AuthBasicProvider ldapmaybe this helps...kind regardsAm 24.04.2006 um 17:53 schrieb Matt

Re: [EMAIL PROTECTED] LDAP authentification from 2.0 to 2.2

2006-04-24 Thread Matt Bockol
Hi Matteo, I've run into the same error, here's an example config that works for us: AuthType Basic AuthName "LDAP Auth" AuthBasicProvider ldap AuthLDAPBindDN cn=blah,dc=blah2,dc=blah3 AuthLDAPBindPassword "" AuthLDAPURL "ldaps://similar to yours" AuthzLDAPAuthoritative off

[EMAIL PROTECTED] LDAP authentification from 2.0 to 2.2

2006-04-24 Thread Matteo Corti
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I posted the same question on alt.apache.configuration some time ago but got no answer and decided to try also here. I am setting up a test server with apache 2.2.0 and having trouble with LDAP authentification. This is (or was in 2.0) my

[EMAIL PROTECTED] LDAP for Auth & DB for Authz

2006-03-15 Thread Thomas Van de Velde
Hello,I am wondering if it is possible to combine two security modules to provide authentication and authorization services.  Users are authenticated through LDAP but their group information is stored in a database.  Is it possible to combine both repositories to provide auth/authz on the web serve

Re: [EMAIL PROTECTED] LDAP Password Protection

2006-03-10 Thread ryan punt
This is normal behavior. IIRC, the browser caches credentials for the duration of the session, making it hard to unset them without some backend work. >>> [EMAIL PROTECTED] 3/10/2006 9:02 AM >>> We have a page that is supposed to be password protected with LDAP authentication. You can login to

[EMAIL PROTECTED] LDAP Password Protection

2006-03-10 Thread Matt Weston
We have a page that is supposed to be password protected with LDAP authentication. You can login to the page just fine; however, unless you close out your browser(verified on Firefox, Opera, and IE) the page fails to ask for a username/password again when you return to the page. Any thoughts?

[EMAIL PROTECTED] LDAP Authentication with mod_authnz_ldap

2006-02-03 Thread Dave Bell
Hi guys :) I'm running TWiki and using a .htaccess file to control access to files. Basically I'm using mod_authnz_ldap and Basic Authentication to authenticate users with our internal directory server. Here is my .htaccess file: SetHandler cgi-script AuthType Basic AuthBasicProvider ldap Auth

[EMAIL PROTECTED] LDAP Search string

2006-01-30 Thread Matt Weston
AuthLDAPUrl "ldap://161.31.24.18:389/ou=student,o=uca?uid?sub?(objectClass=*)" In a LDAP search string such as above...how would I go about limiting the search to just the student folder and exclude subfolders? I read something about a Base, sub, and one filter but, haven't found too much info

[EMAIL PROTECTED] LDAP Question

2006-01-26 Thread Matt Weston
I am trying to use a Novell E-Directory as the LDAP server and am getting this error in my error log when someone has trouble loggin into a page I setup to use LDAP authentication. Does anyone have any ideas? auth_ldap authenticate: user jes05002 authentication failed; URI /securesite/stu

RE: [EMAIL PROTECTED] LDAP Crashes

2006-01-19 Thread Frank Wald
getting the msi installed version or a compiled version working would be greatly appreciated :) Frank -Original Message- From: Paul Shabash [EMAIL PROTECTED] Sent: Thursday, January 5, 2006 11:16 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] LDAP Crashes Running Apache server

[EMAIL PROTECTED] LDAP crashes

2006-01-05 Thread Paul Shabash
Running Apache server 2.0.55 on Windows NT.  If I load LDAP as followsin the httpd.conf file:LoadModule ldap_module modules/util_ldap.soLoadModule auth_ldap_module modules/mod_auth_ldap.sothe server crashes during shutdown of server and during any attempteduse of ldap for authentication.No er

Re: [EMAIL PROTECTED] LDAP and Firefox

2005-12-20 Thread Matt Weston
Belay thatI restarted firefox and it worked like a charm...=) >>> [EMAIL PROTECTED] 12/20/2005 8:28:19 AM >>> I disabled IPv6 in Firefox and response time is the same... >>> [EMAIL PROTECTED] 12/19/2005 6:03:21 PM >>> Matt Weston wrote: >I have configured LDAP authentication for a particular

Re: [EMAIL PROTECTED] LDAP and Firefox

2005-12-20 Thread Matt Weston
I disabled IPv6 in Firefox and response time is the same... >>> [EMAIL PROTECTED] 12/19/2005 6:03:21 PM >>> Matt Weston wrote: >I have configured LDAP authentication for a particular section of our website >and when I try to access this page in FireFox it tends to take quite a bit >longer to lo

Re: [EMAIL PROTECTED] LDAP and Firefox

2005-12-19 Thread Alfred Vahau
Matt Weston wrote: I have configured LDAP authentication for a particular section of our website and when I try to access this page in FireFox it tends to take quite a bit longer to load than when you use IE or Opera with the same website. Does anyone know a good reason and/or fix for this?

[EMAIL PROTECTED] LDAP and Firefox

2005-12-19 Thread Matt Weston
I have configured LDAP authentication for a particular section of our website and when I try to access this page in FireFox it tends to take quite a bit longer to load than when you use IE or Opera with the same website. Does anyone know a good reason and/or fix for this? -

RE: [EMAIL PROTECTED] LDAP Authentication and Subgroups/Nested groups

2005-11-28 Thread Jason Martens
On Mon, 2005-11-28 at 03:04 -0600, Alun Coppack wrote: > Thanks for the reply Owen. No I am not nesting realms, only trying to > place > LDAP groups inside other LDAP groups. If anyone can point me in > another > direction that I request some help it would be greatly appreciated. > I can't remembe

RE: [EMAIL PROTECTED] LDAP Authentication and Subgroups/Nested groups

2005-11-28 Thread Alun Coppack
PROTECTED] Sent: 28 November 2005 08:16 To: users@httpd.apache.org Subject: RE: [EMAIL PROTECTED] LDAP Authentication and Subgroups/Nested groups > -Original Message- > From: Alun Coppack [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 24. November 2005 15:03 > To: users@http

RE: [EMAIL PROTECTED] LDAP Authentication and Subgroups/Nested groups

2005-11-28 Thread Boyle Owen
> -Original Message- > From: Alun Coppack [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 24. November 2005 15:03 > To: users@httpd.apache.org > Subject: [EMAIL PROTECTED] LDAP Authentication and Subgroups/Nested groups caveat: I've never used mod_auth_ldap but from a qu

[EMAIL PROTECTED] LDAP Authentication and Subgroups/Nested groups

2005-11-24 Thread Alun Coppack
I am running Apache 2.0.50 with mod_auth_ldap When I use the 'require group' directive, members of nested groups do not seem to be recognised. I am trying to authenticate using: 'require group cn=Authenticated_users,ou=Roles,dc=sample,dc=com' This group, (Authenticated_Users) has a group called

[EMAIL PROTECTED] LDAP and AUTHENTICATE_[attribute] environment variables

2005-11-11 Thread James Garrison
The current documentation for the AuthLDAPUrl directive includes the following: ldap://host:port/basedn?attribute?scope?filter attribute The attribute to search for. Although RFC 2255 allows a comma-separated list of attributes, only the first attribute will be used, no ma

[EMAIL PROTECTED] LDAP and AUTHENTICATE_[attribute] environment variables

2005-11-09 Thread James Garrison
The current documentation for the AuthLDAPUrl directive includes the following: ldap://host:port/basedn?attribute?scope?filter attribute The attribute to search for. Although RFC 2255 allows a comma-separated list of attributes, only the first attribute will be used, no ma

  1   2   >