Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of covener@gmail.com designates
 209.85.198.184 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=fiSydMcegepnr4qen0v8mG0pUNLoMwzXECP8JCD6t13s/t52xiXcTjX51iK9PchCzdDoK1vSqjiO8+OIUfQ0gSsUlleJUlyB0kbCm6JWXJsADBNxNMu1Z1cR4XAgwZwaRpVCEG4fcZHuNyHN6PHSAoUsgzRe95UjChyrfmPI+iY=
Message-ID: <1404e5910801241139m3064e1f8v944d54e77a507007@mail.gmail.com>
Date: Thu, 24 Jan 2008 14:39:49 -0500
From: "Eric Covener" <covener@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <4798E56F.2000207@aecom.yu.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <2fcf033d0801141058n7f4a7f2es19cded2426704154@mail.gmail.com>
	 <9b1278c10801150707j163dbd9dt9f587ef2f2fda72@mail.gmail.com>
	 <2fcf033d0801180957m44c30e5bga61a16eaaf028460@mail.gmail.com>
	 <4798E56F.2000207@aecom.yu.edu>
Subject: Re: [users@httpd] AuthBasicProvider ldap dbd not failing through

On Jan 24, 2008 2:22 PM, paredes <paredes@aecom.yu.edu> wrote:
> Greetings!
>
> I've successfully built apache2.2.8 with all the appropriate modules
> [mod_authn*, mod_authz*, mod_dbd*, mod_ldap* etc etc] for ldap & mysql
> support. An ldap [valid-user] protected area works fine. A mysql
> [valid-user] protected area works fine. A mysql [require-dbd-group]
> group protected area works fine.
>
> However,  when I use the "AuthBasicProvider ldap dbd" directive to
> protect an area with ldap "failing through" to mysql the fall through
> never occurs. Authentication / authorization seemingly gets "stuck" on
> the first AuthBasicProvider argument. The 2nd argument is always ignored.

When you're testing the two AuthBasicProvider's, are they both hitting
their respective "user not found" case?

For LDAP, this is normally not being able to convert the basic auth
username into a DN on the LDAP server.

If for some reason your testcase has some kind of later authn failure,
it might result in the modules telling mod_auth_basic "yes, i'm
supposed to handle this but it's a bad userid".

-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org