Return-Path: 
 <users-return-71074-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 86270 invoked from network); 16 Mar 2007 14:23:42 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 16 Mar 2007 14:23:42 -0000
Received: (qmail 24702 invoked by uid 500); 16 Mar 2007 14:23:35 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 24646 invoked by uid 500); 16 Mar 2007 14:23:35 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 24620 invoked by uid 99); 16 Mar 2007 14:23:35 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Mar 2007 07:23:35 -0700
X-ASF-Spam-Status: No, hits=2.3 required=10.0
	tests=HTML_FONT_BIG,HTML_MESSAGE
X-Spam-Check-By: apache.org
Received-SPF: pass (herse.apache.org: local policy)
Received: from [24.172.62.1] (HELO sun.zacwolf.com) (24.172.62.1)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Mar 2007 07:23:21 -0700
Received: from [24.172.62.6] (saturn.zacwolf.com [24.172.62.6])
	(authenticated bits=0)
	by sun.zacwolf.com (8.12.8/8.12.8) with ESMTP id l2GEMkcP008685
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <users@httpd.apache.org>; Fri, 16 Mar 2007 10:22:46 -0400
Message-ID: <45FAA842.6060101@zacwolf.com>
Date: Fri, 16 Mar 2007 10:22:58 -0400
From: Zac Morris <zac@zacwolf.com>
User-Agent: Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version: 1.0
To: users@httpd.apache.org
X-Enigmail-Version: 0.94.2.0
Content-Type: multipart/alternative;
 boundary="------------080300030804050404010902"
X-Virus-Checked: Checked by ClamAV on apache.org
Subject: [users@httpd] SECOND REQUEST: mod_authnz_ldap.so module

--------------080300030804050404010902
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Hi,

I need some help.  I've tried Goggle and some forums with no luck on
this one...

I've setup a win32 Apache 2.2.4 server, with the *mod_authnz_ldap*
module.  When I access a protected url I'm getting an Error 500 and the
error.log shows:

[Tue Mar 13 16:26:06 2007] [warn] [client 127.0.0.1] [5496] auth_ldap
authenticate: user devuser authentication failed; URI
/servframe/images/edit.gif [ldap_search_ext_s() for user
failed][Protocol Error]

I'm pointing at an OpenLDAP-2.2.23 repository (running on a different
server on the same subnet).


I've configured Tomcat in a similar way (pointing to the same ldap
repository via the:
    <Realm       className="org.apache.catalina.realm.JNDIRealm" debug="99"
                 connectionURL="ldap://192.168.1.2/"
                 userBase="ou=people,o=/{domain here}/"
                 userSearch="(uid={0})"
      />

...which is working just fine.


>From what few hints I'm finding online, it seems that the "protocol
error" can be seen depending on which LDAP SDKS were used during the
build of mod_authnz_ldap?  I've tried a couple different version of this
library from various sources all with no luck, and I don't have the
setup necessary to compile it on my own.

Is ANYONE familiar with this problem, and is there a simple way to fix it?

THANKS!
-Zac


P.S.  The relevant portion of httpd.conf

<IfModule authnz_ldap_module>
    LDAPSharedCacheSize 200000
    LDAPCacheEntries 1024
    LDAPCacheTTL 600
    LDAPOpCacheEntries 1024
    LDAPOpCacheTTL 600
</IfModule>
Alias /servframe "R:\servframe"
<Directory "R:\servframe">
     AllowOverride All
     order allow,deny
     allow from all
     AuthName "servframe"
     AuthType Basic
     AuthBasicProvider ldap
     AuthLDAPURL ldap://192.168.1.2:389/ou=people,o=/{domain 
here}/?uid?sub?(objectClass=*)
     AuthzLDAPAuthoritative off
     require valid-user
</Directory>

--------------080300030804050404010902
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content=3D"text/html;charset=3DUTF-8" http-equiv=3D"Content-Type"=
>
  <title></title>
</head>
<body bgcolor=3D"#ffffff" text=3D"#000000">
<font size=3D"+1"><font face=3D"Trebuchet MS">Hi,<br>
<br>
I need some help.=C2=A0 I've tried Goggle and some forums with no luck on=

this one...<br>
<br>
I've setup a win32 Apache 2.2.4 server, with the <b>mod_authnz_ldap</b>
module.=C2=A0 When I access a protected url I'm getting an Error 500 and =
the<font
 face=3D"Courier New, Courier, monospace"> error.log</font> shows:<br>
<br>
<small><font face=3D"Courier New, Courier, monospace">[Tue Mar 13
16:26:06 2007] [warn] [client 127.0.0.1] [5496] auth_ldap authenticate:
user devuser authentication failed; URI /servframe/images/edit.gif
[ldap_search_ext_s() for user failed][Protocol Error]</font></small><br>
<br>
I'm pointing at an OpenLDAP-2.2.23 repository (running on a different
server on the same subnet).<br>
<br>
<br>
I've configured Tomcat in a similar way (pointing to the same ldap
repository via the:<br>
<font face=3D"Courier New, Courier, monospace">=C2=A0=C2=A0=C2=A0 &lt;Rea=
lm=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0
className=3D"org.apache.catalina.realm.JNDIRealm" debug=3D"99"<br>
=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=
=C2=A0 connectionURL=3D<a class=3D"moz-txt-link-rfc2396E"
 href=3D"ldap://192.168.1.2/">"ldap://192.168.1.2/"</a><br>
=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0=
 =C2=A0 userBase=3D"ou=3Dpeople,o=3D<i>{domain here}</i>"<br>
=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0=
=C2=A0 userSearch=3D"(uid=3D{0})"<br>
=C2=A0=C2=A0=C2=A0 =C2=A0 /&gt;</font><br>
<br>
=2E..which is working just fine.<br>
<br>
<br>
=46rom what few hints I'm finding online, it seems that the "protocol
error" can be seen depending on which LDAP SDKS were used during the
build of mod_authnz_ldap?=C2=A0 I've tried a couple different version of
this library from various sources all with no luck, and I don't have
the setup necessary to compile it on my own.<br>
<br>
Is ANYONE familiar with this problem, and is there a simple way to fix
it?<br>
<br>
THANKS!<br>
-Zac<br>
<br>
<br>
P.S.=C2=A0 The relevant portion of httpd.conf<br>
<br>
<font face=3D"Courier New, Courier, monospace">&lt;IfModule
authnz_ldap_module&gt;<br>
=C2=A0=C2=A0=C2=A0 LDAPSharedCacheSize 200000 <br>
=C2=A0=C2=A0=C2=A0 LDAPCacheEntries 1024 <br>
=C2=A0=C2=A0=C2=A0 LDAPCacheTTL 600 <br>
=C2=A0=C2=A0=C2=A0 LDAPOpCacheEntries 1024 <br>
=C2=A0=C2=A0=C2=A0 LDAPOpCacheTTL 600 <br>
&lt;/IfModule&gt;<br>
Alias /servframe "R:\servframe"<br>
&lt;Directory "R:\servframe"&gt;<br>
=C2=A0=C2=A0=C2=A0=C2=A0 AllowOverride All<br>
=C2=A0=C2=A0=C2=A0=C2=A0 order allow,deny<br>
=C2=A0=C2=A0=C2=A0=C2=A0 allow from all<br>
=C2=A0=C2=A0=C2=A0=C2=A0 AuthName "servframe"<br>
=C2=A0=C2=A0=C2=A0=C2=A0 AuthType Basic<br>
=C2=A0=C2=A0=C2=A0 =C2=A0AuthBasicProvider ldap<br>
=C2=A0=C2=A0=C2=A0=C2=A0 AuthLDAPURL <a class=3D"moz-txt-link-freetext"
 href=3D"ldap://192.168.1.2:389/ou=3Dpeople,o=3D">ldap://192.168.1.2:389/=
ou=3Dpeople,o=3D</a><i>{domain=C2=A0
here}</i>?uid?sub?(objectClass=3D*)<br>
=C2=A0=C2=A0=C2=A0 =C2=A0AuthzLDAPAuthoritative off<br>
=C2=A0=C2=A0=C2=A0 =C2=A0require valid-user<br>
&lt;/Directory&gt;</font></font></font>
</body>
</html>

--------------080300030804050404010902--