Return-Path: 
 <users-return-78669-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 9228 invoked from network); 5 Feb 2008 23:39:58 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 5 Feb 2008 23:39:58 -0000
Received: (qmail 39292 invoked by uid 500); 5 Feb 2008 23:39:40 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 39274 invoked by uid 500); 5 Feb 2008 23:39:40 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 39263 invoked by uid 99); 5 Feb 2008 23:39:40 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 05 Feb 2008 15:39:40 -0800
X-ASF-Spam-Status: No, hits=1.5 required=10.0
	tests=SPF_PASS,WEIRD_PORT
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of deckrider@gmail.com
 designates 209.85.162.179 as permitted sender)
Received: from [209.85.162.179] (HELO el-out-1112.google.com) (209.85.162.179)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 05 Feb 2008 23:39:09 +0000
Received: by el-out-1112.google.com with SMTP id j27so897478elf.0
        for <users@httpd.apache.org>; Tue, 05 Feb 2008 15:38:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        bh=ergaFSa4SvT2qMBPUCEVAUahJoF+kz30L3l1tivBU0w=;
        b=dZSU3ilC54zJLoyZiW+oGosFHGM3BmF96cS1OSMA0IOEezxGn26cWRM4d443GbfxmxlFL6XFvxOf5r4wSGm0jK/ZrfKCzkGV/emwnpbkF3CLmCIi6F8wd/XGERz3Ia47YcxYftTFDq+M9RRl22aLLK8QWW6R78QtLOvIs79B8g4=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=LcwE5ZbJUbSIu3bOj6bKmmDgRTpyPI4dHopfl1aQ+Cv8lp/YJOyGHbvfDrE/iSBNJLMKx2rn5OwjORDpfrF7XyGyNSZz2eorh6KY+HuRVNphgkL7eRnC6w0WRwTTYRzYVFeC7Scfp8DD2a2B6hbnsCaM3fapIkgVyTymrYFZ5QQ=
Received: by 10.142.128.6 with SMTP id a6mr4825753wfd.206.1202254720085;
        Tue, 05 Feb 2008 15:38:40 -0800 (PST)
Received: by 10.142.126.20 with HTTP; Tue, 5 Feb 2008 15:38:39 -0800 (PST)
Message-ID: <40c510220802051538p45ddaa4ek1fd13ab89c520b90@mail.gmail.com>
Date: Tue, 5 Feb 2008 16:38:39 -0700
From: deckrider <deckrider@gmail.com>
To: users@httpd.apache.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Virus-Checked: Checked by ClamAV on apache.org
Subject: [users@httpd] BOTH ldap AND htpasswd/file authentication (apache
 httpd 2.2.6)

Hello,

I'm using apache httpd 2.2.6 on Solaris (for Subversion).

My trouble is trying to supplement ldap authentication with a few
htpasswd entries.  I can get each working separately, but not together
(it appears to occasionally work, but mostly causes hanging).

Works:

AuthType Basic
AuthName "Foo / Bar (https://foo.bar.com/)"
AuthBasicProvider ldap
AuthLDAPURL ldaps://foo.bar.com:2636/o=corp?corpLHS?sub?(objectclass=corpPerson)
<LimitExcept GET PROPFIND OPTIONS REPORT>
        Require ldap-user jsmith jdoe
</LimitExcept>

Works:

AuthType Basic
AuthName "Foo / Bar (https://foo.bar.com/)"
AuthBasicProvider file
AuthUserFile /opt/apache2/etc/passwd
<LimitExcept GET PROPFIND OPTIONS REPORT>
        Require user autobuild
</LimitExcept>

Does NOT Work:

AuthType Basic
AuthName "Foo / Bar (https://foo.bar.com/)"
AuthBasicProvider file ldap
AuthUserFile /opt/apache2/etc/passwd
AuthLDAPURL ldaps://foo.bar.com:2636/o=corp?corpLHS?sub?(objectclass=corpPerson)
<LimitExcept GET PROPFIND OPTIONS REPORT>
        Require user autobuild
        Require ldap-user jsmith jdoe
</LimitExcept>

I've also tried various combinations of the following (which I don't
really understand):

AuthzUserAuthoritative Off/On
AuthzLDAPAuthoritative Off/On

Is it possible that this is a bug that is fixed in some other version
of apache httpd?  Am I just clueless?

Thanks in advance!

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org