Return-Path: 
 <users-return-69058-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 23139 invoked from network); 21 Dec 2006 14:39:09 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 21 Dec 2006 14:39:09 -0000
Received: (qmail 30913 invoked by uid 500); 21 Dec 2006 14:39:04 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 30858 invoked by uid 500); 21 Dec 2006 14:39:04 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 30847 invoked by uid 99); 21 Dec 2006 14:39:04 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 21 Dec 2006 06:39:04 -0800
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (herse.apache.org: domain of hwoehle@arcor.de designates
 151.189.21.42 as permitted sender)
Received: from [151.189.21.42] (HELO mail-in-02.arcor-online.net)
 (151.189.21.42)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 21 Dec 2006 06:38:52 -0800
Received: from mail-in-13-z2.arcor-online.net (mail-in-13-z2.arcor-online.net
 [151.189.8.30])
	by mail-in-02.arcor-online.net (Postfix) with ESMTP id 341DF2D78A5
	for <users@httpd.apache.org>; Thu, 21 Dec 2006 15:38:31 +0100 (CET)
Received: from mail-in-05.arcor-online.net (mail-in-05.arcor-online.net
 [151.189.21.45])
	by mail-in-13-z2.arcor-online.net (Postfix) with ESMTP id 266731B8E6A
	for <users@httpd.apache.org>; Thu, 21 Dec 2006 15:38:31 +0100 (CET)
Received: from [192.168.1.101] (pD95FF98D.dip.t-dialin.net [217.95.249.141])
	(Authenticated sender: hwoehle@arcor.de)
	by mail-in-05.arcor-online.net (Postfix) with ESMTP id B1A3F1C320B
	for <users@httpd.apache.org>; Thu, 21 Dec 2006 15:38:29 +0100 (CET)
From: Holger =?ISO-8859-1?Q?W=F6hle?= <hwoehle@arcor.de>
To: users@httpd.apache.org
In-Reply-To: <458AA93D.1050903@jfsc.gov.br>
References: <458AA93D.1050903@jfsc.gov.br>
Content-Type: text/plain; charset=ISO-8859-1
Date: Thu, 21 Dec 2006 15:38:28 +0100
Message-Id: <1166711908.5629.3.camel@localhost.localdomain>
Mime-Version: 1.0
X-Mailer: Evolution 2.8.1 
Content-Transfer-Encoding: 8bit
X-Virus-Checked: Checked by ClamAV on apache.org
Subject: Re: [users@httpd] Novell and mod_ldap - User is not unique (search
	found two or more matches)

On Do, 2006-12-21 at 12:33 -0300, F�bio Coelho wrote:
> Hi dears
> 
> My Name is F�bio Coelho, I'am a brazilian Linux admin.
> 
> I'm trying to configure Apache to authenticate anonymously against
> Novell Ldap, and I did a ldapsearch from the console, with the filter:
> 
> &(cn=qlx)(objectClass=Person)
> 
> that returns the following text:
> 
> administrativo:/opt/personalizados # ldapsearch -h ldap.jfsc.gov.br -x
> -b o=jfsc -s sub '(&(cn=qlx)(objectClass=Person))' objectClass
> # extended LDIF
> #
> # LDAPv3
> # base <o=jfsc> with scope subtree
> # filter: (&(cn=qlx)(objectClass=Person))
> # requesting: objectClass
> #
> 
> # QLX, NINF, FLP, JFSC
> dn: cn=QLX,ou=NINF,ou=FLP,o=JFSC
> objectClass: inetOrgPerson
> objectClass: organizationalPerson
> objectClass: Person
> objectClass: ndsLoginProperties
> objectClass: Top
> objectClass: qmailUser
> 
> # search result
> search: 2
> result: 0 Success
> 
> # numResponses: 2
> # numEntries: 1
> 
> 
> 
> 
> 
> One entrie, but for apache are two, using the same filter:
> 
> 
> 
> 
>     <Directory "/srv/www/newdesenv/htdocs/">
>         AuthName "Autenticacao LDAP"
>         AuthType Basic
>         AuthBasicProvider ldap
>         AuthLDAPRemoteUserIsDN on
>         AuthLDAPURL   ldap://ldap.jfsc.gov.br/  \
>                       o=JFSC?cn?sub?(objectClass=Person)
>         Require valid-user
>         Options Indexes FollowSymLinks
>         AllowOverride None
>         Order allow,deny
>         Allow from all
>     </Directory>
> 
> result in the error
> 
> [Mon Dec 18 12:52:54 2006] [warn] [client 10.5.3.92] [7194] auth_ldap
> authenticate: user qlx authentication failed; URI /info.php [User is not
> unique (search found two or more matches)][No such object]
> 
> It is a bug or a characteristic? How can i circunvent this?
> 
> Thank you for the atention
> 
> F�bio Coelho
> 
> 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org