Return-Path: 
 <users-return-75365-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 80018 invoked from network); 11 Sep 2007 03:28:34 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 11 Sep 2007 03:28:34 -0000
Received: (qmail 95596 invoked by uid 500); 11 Sep 2007 03:28:17 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 95581 invoked by uid 500); 11 Sep 2007 03:28:17 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 95570 invoked by uid 99); 11 Sep 2007 03:28:17 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 10 Sep 2007 20:28:17 -0700
X-ASF-Spam-Status: No, hits=2.7 required=10.0
	tests=SPF_NEUTRAL,WEIRD_PORT
X-Spam-Check-By: apache.org
Received-SPF: neutral (nike.apache.org: local policy)
Received: from [204.203.49.100] (HELO cheshire.cheshiresgrin.net)
 (204.203.49.100)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 11 Sep 2007 03:29:46 +0000
Received: by cheshire.cheshiresgrin.net (Postfix, from userid 99)
	id 3A43F5C009; Mon, 10 Sep 2007 20:27:38 -0700 (PDT)
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on
	cheshire.cheshiresgrin.net
X-Spam-Level: 
Received: from [10.253.7.21] (cheshire.cheshiresgrin.net [10.253.7.21])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by cheshire.cheshiresgrin.net (Postfix) with ESMTP id CAEDD5C008
	for <users@httpd.apache.org>; Mon, 10 Sep 2007 20:27:36 -0700 (PDT)
Message-ID: <46E60B28.1040000@linfield.edu>
Date: Mon, 10 Sep 2007 20:27:36 -0700
From: Rob Tanner <rtanner@linfield.edu>
Reply-To: rtanner@linfield.edu
Organization: Linfield College
User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US;
 rv:1.8.0.9) Gecko/20061206 Thunderbird/1.5.0.9 Mnenhy/0.7.5.0
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Checked: Checked by ClamAV on apache.org
X-Old-Spam-Status: No,
 score=-104.2 required=2.0 tests=ALL_TRUSTED,AWL,BAYES_00,
	TW_HN,USER_IN_WHITELIST autolearn=ham version=3.1.1
Subject: [users@httpd] Having problems getting mod_authnz_ldap to work right

Hi,

I upgraded from Apace 2.0.53 to 2.2.4 and from mod_auth_ldap to 
mod_authnz_ldap and that's where my troubles began.  I have one 
protected directory that anyone with an LDAP entry should be able to 
access, but something is failing in the process and Apache is not 
providing in helpful logs (when I deliberately mistype my password I get 
an error in the error_log but other times no log)

Here's the configuration on the old server that does work:
<Directory /var/apache/html/support/protected>
        SSLRequireSSL
        AuthLDAPUrl ldap://biblio.linfield.edu:389/o=linfield.edu?uid
        AuthLDAPBindDN "cn=secret, ou=Special Users, o=linfield.edu"
        AuthLDAPBindPassword "secret"
        AuthName "Protected"
        AuthType Basic
    <Limit GET>
        require valid-user
    </Limit>
    Options Indexes FollowSymLinks
    AllowOverride None
</Directory>

Here's my attempted mod_authnz_ldap configuration:
<Directory /var/apache/html/support/protected>
        SSLRequireSSL
        AuthBasicProvider ldap
        AuthLDAPURL ldap://biblio.linfield.edu:389/o=linfield.edu?uid
        AuthLDAPBindDN "cn=secret, ou=Special Users, o=linfield.edu"
        AuthLDAPBindPassword "secret"
        AuthName "Protected"
        AuthType Basic
    <Limit GET>
        Require valid-user
    </Limit>
    Options Indexes FollowSymLinks
    AllowOverride None
</Directory>

Can someone please tell me what's missing?

Thanks,
Rob


-- 
Rob Tanner
UNIX Services Manager
Linfield College, McMinnville OR

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org