httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Tine De Schutter <tinedeschut...@gmail.com>
Subject Re: [users@httpd] Multiple authentication backend... how?
Date Tue, 21 Sep 2010 12:02:08 GMT
Hi Eric,

Thank you for answering!
I should tell you honestly I didn't understand what you were talking about,
I'm really really new in these things.
But I did find the solution myself.

I had to "take ownership" of the Apache files, so that I could access and
adapt the Apache files.
Something weird, but it's ok now.

Best regards,

Tine

On Tue, Sep 21, 2010 at 1:43 PM, Eric Covener <covener@gmail.com> wrote:

> > The module loading order in httpd.conf is:
> >
> > LoadModule authnz_ldap_module libexec/apache22/mod_authnz_ldap.so
> > LoadModule auth_kerb_module   libexec/apache22/mod_auth_kerb.so
> >
> > So mod_authnz_ldap has a lower priority than mod_auth_kerb
>
> That's not really the operative priority or sequencing mechanism.
>
> >
> > If I am to use Kerberos it works fine, and if I change AuthType
> > Kerberos into AuthType Basic ; then login using the ldap user
> > credentials is fine...
>
> It's not just "backends" you're switching, you're also switching the
> frontend protocol and the AuthType.
>
> If you don't have AuthType basic, HTTP basic authentication doesn't
> happen, so basic auth providers like LDAP are not called.
>
> There's no support for trying multiple AuthTypes, and since both of
> yours want to be explicitly turned on with "AuthType" to do anything
> the fact that the enabled one returns DECLINED doesn't help much.
>
> It should be clear from the error log which ones are running at any
> given point, you can't trace it so well without a debugger
>
> --
> Eric Covener
> covener@gmail.com
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

Mime
View raw message