Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of harryholt@gmail.com
 designates 209.85.128.186 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:mime-version:content-type;
        b=O6o931gI3ZZfclC3L9kDgQZs/cAa1aRDoE7n/SXAhDOo7g9JFB44+Tdg7NugthlG1UeezESq90X2SdV05lIWGseLiyc+81wfHZywGqZa6zlrLg4SOArwwAid3Ym8TuGt+CD24XPROd2ph4bgURkWHcAZB/zz5A6VmJm/uzw9qUA=
Message-ID: <7c8072a00802260935o3592534atbaf8d5a5bb080905@mail.gmail.com>
Date: Tue, 26 Feb 2008 12:35:13 -0500
From: "Harry Holt" <harryholt@gmail.com>
To: users@httpd.apache.org
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_15106_11074101.1204047313731"
Subject: [users@httpd] SSL LDAP Connections on Win32

------=_Part_15106_11074101.1204047313731
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Okay, apparently, with the binary distribution of Apache 2.2 for Win32, it
is not possible to initialize an SSL connection to an LDAP server using
mod_ldap and mod_authnz_ldap.

During startup I get:

[info] LDAP: SSL support unavailable: LDAP: CA certificates cannot be set
using this method, as they are stored in the registry instead.

And if I try to initiate an SSL connection with an LDAP server I get:

[warn] [client 127.0.0.1] [8048] auth_ldap authenticate: user vec02
authentication failed; URI /svn [LDAP: an attempt to set LDAP_OPT_SSL on
failed.][Parameter Error]

So, my questions:

Am I crazy or is LDAP over SSL just not supported for this distribution?
and

If I'm not crazy, is there a binary distribution of aprutil-1.dll that will
support this (that anyone knows of) or will I have to figure out how to
compile it myself?

I appreciate any info and pointers.

Thx... HH

-- 
Harry Holt, PMP

------=_Part_15106_11074101.1204047313731
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Okay, apparently, with the binary distribution of Apache 2.2 for Win32, it is not possible to initialize an SSL connection to an LDAP server using mod_ldap and mod_authnz_ldap.<br><br>During startup I get:<br><br>[info] LDAP: SSL support unavailable: LDAP: CA certificates cannot be set using this method, as they are stored in the registry instead.<br>
<br>And if I try to initiate an SSL connection with an LDAP server I get:<br><br>[warn] [client <a href="http://127.0.0.1">127.0.0.1</a>] [8048] auth_ldap authenticate: user vec02 authentication failed; URI /svn [LDAP: an attempt to set LDAP_OPT_SSL on failed.][Parameter Error]<br>
<br>So, my questions:<br><br>Am I crazy or is LDAP over SSL just not supported for this distribution?&nbsp; and<br><br>If I&#39;m not crazy, is there a binary distribution of aprutil-1.dll that will support this (that anyone knows of) or will I have to figure out how to compile it myself?<br>
<br>I appreciate any info and pointers.<br><br>Thx... HH<br clear="all"><br>-- <br>Harry Holt, PMP

------=_Part_15106_11074101.1204047313731--