Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Andreatta Sébastien
Many thanks it work's :-))) Le 19/08/2014 20:17, Eric Covener a écrit : I think you're missing the AuthnProviderAlias fix and it just happens to fail a different way (no Bug? message). I recall this failure being very silent. http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/modules/aaa

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Eric Covener
I think you're missing the AuthnProviderAlias fix and it just happens to fail a different way (no Bug? message). I recall this failure being very silent. http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/modules/aaa/mod_authn_core.c?r1=1556817&r2=1556818&pathrev=1556818&view=patch On Tue,

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Andreatta Sébastien
Could you just tell me how to do that ? LogLevel authz_core:trace8 authn_core:trace8 Is correct ? Because i have nothing more ... A full "debug" log : [Tue Aug 19 20:02:26.407058 2014] [authz_core:debug] [pid 5489] mod_authz_core.c(809): [client 109.133.130.18:59769] AH01626: authorization

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Eric Covener
Can you enable trace8 logging and post a full error log? There is a confusing step where authorization stuff runs twice (before/after user authenticated). Hopefully you started with 2.4.8 or later, since AuthnProviderAlias also had this same bug. On Tue, Aug 19, 2014 at 1:30 PM, Andreatta Sébasti

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Andreatta Sébastien
Thanks for your reactivity ;o) Unfortunately, the patch is not working. mod_authz_core.c is well patched After recompiling the rpm and update it i still can't log me with a ldap account : [Tue Aug 19 19:04:54.929367 2014] [authz_core:debug] [pid 18568] mod_authz_core.c(809): [client 109.133.

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Eric Covener
On Tue, Aug 19, 2014 at 8:17 AM, Andreatta Sébastien wrote: > I can try to rebuild apache yes, but i need to deploy a new VM I think your issue is fixed in the path in the last comment here: https://issues.apache.org/bugzilla/show_bug.cgi?id=56870

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Andreatta Sébastien
I can try to rebuild apache yes, but i need to deploy a new VM Le 19/08/2014 14:09, Eric Covener a écrit : It looks like a bug, are you able to rebuild with a patch? - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.o

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Eric Covener
It looks like a bug, are you able to rebuild with a patch? On Tue, Aug 19, 2014 at 7:57 AM, Andreatta Sébastien wrote: > Yes you're right... just a bad copy/past.. > > Here the correct configuration file : > > > AuthLDAPBindDN cn=Manager,dc=soez,dc=be > AuthLDAPBindPassword bmqD9:q9pmCx

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Andreatta Sébastien
Yes you're right... just a bad copy/past.. Here the correct configuration file : AuthLDAPBindDN cn=Manager,dc=soez,dc=be AuthLDAPBindPassword bmqD9:q9pmCx AuthLDAPURL ldap://localhost/ou=Users,o=soez,dc=soez,dc=be?uid?? cn=Warez,ou=Groups,o=soez,dc=soez,dc=be> AuthLDAPBindDN

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Eric Covener
On Tue, Aug 19, 2014 at 7:10 AM, Andreatta Sébastien wrote: > [Tue Aug 19 12:44:20.230719 2014] [authz_core:error] [pid 21409] [client > 109.133.130.18:50217] AH02305: no alias provider found for > 'ldap-group-warez' (BUG?) There is no such thing as an authorization alias. Where do you think "ld

Re: [users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Eric Covener
On Tue, Aug 19, 2014 at 7:22 AM, Eric Covener wrote: > There is no such thing as an authorization alias. Where do you think Duh, of course there is. Sorry. But you don't have one by that particular name. -- Eric Covener cove...@gmail.com ---

[users@httpd] Apache 2.4 , AuthzProviderAlias doesn't work with SSL Virtualhost

2014-08-19 Thread Andreatta Sébastien
Hi, I write you today because i'm just upgrade from Centos 6.5 ( httpd 2.2 ) to Centos 7 ( httpd 2.4.6 ) . Now, I try to use AuthzProviderAlias and I finally successfully make it work with http. Here's my config ( /etc/httpd/conf.d/ldap.conf ) AuthLDAPBindDN cn=Manager,dc=Domain,dc=be