Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
To: users@httpd.apache.org
Message-ID: <OFF8B88B4D.8981BDD8-ONCA256E7D.00166637@facs.gov.au>
From: rodney.malbon@facs.gov.au
Date: Wed, 21 Apr 2004 14:15:31 +1000
MIME-Version: 1.0
Content-type: text/plain; charset=us-ascii
Subject: [users@httpd] Partial display of images when authenticating to LDAP
 Domino Server

I am using RedHat ES version 3 and Httpd 2.0.46 using mod_auth_ldap.so to
users authenticate with a Domino LDAP server.  The authentication works for
the text parts of the web pages and occasionally for some of the images on
the web page.
However some of the images are not displayed and this varies when
refreshing the web page that is different images may be displayed or not
displayed.  For each of the images that are not display the user is asked
to authenticate again. The logs show that the user authentication has
failed with invalid credentials. If I restart httpd and right click on the
undisplayed images and click show picture (browser is IE 5.5) then image
will be displayed without further requests for authentication. IE caches
the user authentication details and just resends them for each of the
images.

I am using the require valid-user directive in the above scenario.  When I
use the require group directive the authentication fails straight away for
the whole web page.  If the authentication  directives are removed the
whole web pages are display correctly.

I have look at the documents at the Apache web site and search the web but
I am unable to find anything that help with the problem.

Below is an extract from the httpd.conf:

<VirtualHost aaa.bbb.ccc.ddd:443>
    LogLevel debug
    ServerAdmin support@zz.gov.tv
    ServerName xx.zz.gov.tv
    SSLEngine On
    SSLProtocol All
    SSLCipherSuite ALL:!ADH:!EXPORTS56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:
+EXP:+eNULL
    SetEnvIf Request_URI \.gif image-request
    SetEnvIf Request_URI \.jpg image-request
    SetEnvIf Request_URI \.png image-request
    SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
    SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
    ProxyBadHeader Ignore
    ProxyPreserveHost off
    ProxyPass / http://eee.fff.ggg.hhh/
    ProxyPassReverse / http://eee.fff.ggg.hhh/
    <proxy http://eee.fff.ggg.hhh/*>
        SetOutputFilter INCLUDES
        AuthName "Test-Net Clients Only"
        AuthType Basic
        AuthLDAPEnabled on
        AuthLDAPBindDN "cn=reverse_proxy,o=facs-ldap"
        AuthLDAPBindPassword apaTchysolution
        AuthLDAPURL "ldap://kkk.lll.mmm.nnn.:389/o=test-ldap?uid"
        AuthLDAPAuthoritative on
        AuthLDAPGroupAttributeIsDN off
        AuthLDAPGroupAttribute member
        AuthLDAPGroupAttribute member
        require valid-user
        #require group CN=webgroup,o=test-ldap
    </Proxy>
    ErrorLog logs/xrod-error_log
    CustomLog logs/xrod-access_log combined env=!image-request
</VirtualHost>


Thanks for your help with this problem,
Rodney Malbon


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org