Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 67394 invoked from network); 3 Jan 2011 18:51:30 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 3 Jan 2011 18:51:30 -0000 Received: (qmail 91027 invoked by uid 500); 3 Jan 2011 18:51:27 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 91003 invoked by uid 500); 3 Jan 2011 18:51:27 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 90995 invoked by uid 99); 3 Jan 2011 18:51:27 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Jan 2011 18:51:27 +0000 X-ASF-Spam-Status: No, hits=-2.3 required=10.0 tests=RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [216.82.249.147] (HELO mail29.messagelabs.com) (216.82.249.147) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Jan 2011 18:51:19 +0000 X-VirusChecked: Checked X-Env-Sender: DLONG@Lynden.com X-Msg-Ref: server-2.tower-29.messagelabs.com!1294080656!48227180!2 X-StarScan-Version: 6.2.9; banners=-,-,- X-Originating-IP: [12.144.241.11] Received: (qmail 31873 invoked from network); 3 Jan 2011 18:50:57 -0000 Received: from mailgw01.lynden.com (HELO LISHUBCAS1.Lynden.com) (12.144.241.11) by server-2.tower-29.messagelabs.com with AES128-SHA encrypted SMTP; 3 Jan 2011 18:50:57 -0000 Received: from LISMBX1.Lynden.com ([fe80::c8c4:8552:8db4:8ad]) by LISHUBCAS1.Lynden.com ([2002:8001:a52::8001:a52]) with mapi; Mon, 3 Jan 2011 10:50:55 -0800 From: David Long To: "users@httpd.apache.org" Date: Mon, 3 Jan 2011 10:50:54 -0800 Thread-Topic: how to use ldap authentication Thread-Index: AcuoXYt5lq2abw3WTVqIbEHZnJWpFwDFc9+Q Message-ID: References: <4D18E3B4.1060803@kippdata.de><4D190FBC.6090605@kippdata.de><4D1A545C.5000008@kippdata.de> <4D1CE6F9.7080802@kippdata.de> In-Reply-To: <4D1CE6F9.7080802@kippdata.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org Subject: [users@httpd] how to use ldap authentication I am trying to use httpd 2.2.17 with ldap authentication but get "ldap init= ialization failed" message Here is my configuration I downloaded apr 1.4.2 and apr-util 1.3.10 For apr 1.4.2, I did "configure --prefix=3D/www/apache2/apr-httpd/" For apr util 1.3.10, I did "configure --prefix=3D/www/apache2/apr-util-http= d/ --with-apr=3D/www/apache2/apr-httpd/ --with-ldap" For httpd-2.2.17 configure --enable-ldap --enable-authnz-ldap All compiled and installed fine. In httpd.conf file I have following for my= ldap authentication restricted folder. AuthName "Staff Only" AuthType Basic AuthBasicProvider ldap AuthLDAPURL ldap://ldap.lynden.com:389/ou=3Dpeople,dc=3Dlynden,dc=3Dcom?uid= ?sub?(objectClass=3DorganizationalPerson) AuthzLDAPAuthoritative off require valid-user I can started httpd. But when I hit restricted folder. I still got error. Here is my error_log, parser fine but ldap initialization failed. How do I = test my apache ldap function? Or do I need to recompile my apr-util? [Wed Dec 29 15:37:12 2010] [debug] mod_authnz_ldap.c(1010): [293]=20 auth_ldap url parse:=20 `ldap://128.1.10.243:389/ou=3Dpeople,dc=3Dlynden,dc=3Dcom?uid?sub?(objectCl= a ss=3DorganizationalPerson)', Host: 128.1.10.243:389, Port: 389, DN:=20 ou=3Dpeople,dc=3Dlynden,dc=3Dcom, attrib: uid, scope: subtree, filter:=20 (objectClass=3DorganizationalPerson), connection mode: not using SSL=20 [Wed Dec 29 15:37:12 2010] [debug] mod_authnz_ldap.c(403): [client=20 12.171.37.10] [293] auth_ldap authenticate: using URL=20 ldap://128.1.10.243:389/ou=3Dpeople,dc=3Dlynden,dc=3Dcom?uid?sub?(objectCla= s s=3DorganizationalPerson) [Wed Dec 29 15:37:12 2010] [info] [client=20 12.171.37.10] [293] auth_ldap authenticate: user dlong authentication=20 failed; URI /EMU [LDAP: ldap initialization failed][Unknown error] Can someone help? Thanks in advance. David Long --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org