httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From <ldescotte....@orange-ftgroup.com>
Subject RE: [users@httpd] LDAP authnz with SSL
Date Wed, 02 Jun 2010 13:55:42 GMT
It works now, I just added 

LDAPVerifyServerCert off
LDAPTrustedMode SSL 

to httpd.conf.

Thanks for your help.

Loic

-----Original Message-----
From: Emmanuel Bailleul [mailto:Emmanuel.Bailleul@telindus.fr] 
Sent: mercredi 2 juin 2010 15:53
To: users@httpd.apache.org
Subject: RE: [users@httpd] LDAP authnz with SSL

> -----Message d'origine-----
> De : ldescotte.ext@orange-ftgroup.com [mailto:ldescotte.ext@orange- 
> ftgroup.com] Envoyé : mercredi 2 juin 2010 12:15 À : 
> users@httpd.apache.org Objet : RE: [users@httpd] LDAP authnz with SSL
> 
> I didn't need to set any certificate file on JXPlorer but I can 
> connect to LDAP in https with the client, so I don't think it is 
> needed
> 
> -----Original Message-----
> From: Eric Covener [mailto:covener@gmail.com]
> Sent: mercredi 2 juin 2010 12:11
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] LDAP authnz with SSL
> 
> On Wed, Jun 2, 2010 at 5:06 AM,  <ldescotte.ext@orange-ftgroup.com> wrote:
> > Here is the error i'm getting when i try to contact LDAP server with 
> > SSL
> :
> >
> >  [warn] [client ****] [12740] auth_ldap authenticate: user *** 
> > authentication failed; URI server2 [LDAP: ldap_simple_bind_s() 
> > failed][Can't contact LDAP server]
> >
> 
> Wouldn't you need to teach it about a trusted CA for the LDAP server 
> (LDAPTrustedGLobalCert)?
> 
> --
> Eric Covener
> covener@gmail.com
> 

Hi,

Rather than using JXPlorer, you may at least try with ldapsearch on the same box.
Btw, have you configured your ldap.conf file for "TLS support" (the minimum being the "TLS_REQCERT"
parameter) ?
A quick google search gives for example (in French, but that may be of interest to you ...)
:
http://arnofear.free.fr/linux/template.php?tuto=2&page=5

Regards

Emmanuel

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message