Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of atstake@gmail.com designates
 209.85.146.177 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=YI1kKoKMG8oa+j0rxlp28mbjVMGi2KbUZAg+C/aWBvWCj63oeHokLF1AxYVzhJI+HG69+KGZYqWqBbRr7JMUONgHhJliR+8o4SHf1kkPT+Qm9O5xCPCoz9PXVIy+rBLDYK2INqYih0foiSmHYpXkNdwQY3Uz8jKpLAw4U1TeI+Y=
Message-ID: <8adc88580802242006v8cbb85eka1db7f13d27e8c15@mail.gmail.com>
Date: Mon, 25 Feb 2008 15:06:15 +1100
From: Chris <atstake@gmail.com>
To: users@httpd.apache.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: [users@httpd] ldap/ AD user authentication error

I am trying to get Apache 2.2.4 on OpenSUSE 10.3 working with Active
Directory (AD) LDAP authentication for users. But everytime I try to
login I get a 403 error. I have ldap_module and authnz_ldap_module
enabled. And I am trying over both HTTP and HTTPS but the password
prompt comes back asking for user name & password again and again. I
did a tcpdump and can see packets going to the AD end but nothing is
coming back.

I have put AllowOverride All in /etc/apache2/default-server.conf and
also on /etc/apache2/vhosts.d/vhost-myserver-ssl.conf

Here's my /etc/apache2/vhosts.d/vhost-myserver-ssl.conf &
/etc/apache2/vhosts.d/vhost-myserver.conf

<Directory "/srv/www/htdocs/myserver/secret">
   AllowOverride All
   Options Indexes
   Order allow,deny
   Allow from all
   AuthUserFile /srv/www/htdocs/myserver/secret/.htaccess
</Directory>

Here's my /path/to/.htaccess

AuthName "Test"
AuthType Basic
AuthLDAPURL ldap://ad.myorg.org:389/ou=staff,ou=mkt,ou=locations,dc=myorg,dc=org
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
require valid-user

Could anyone tell me what I am doing wrong? Any help would be much
appreciated. Thanks.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org