Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: local policy includes SPF record at
 spf.trusted-forwarder.org)
MIME-Version: 1.0
Date: Thu, 9 Jan 2014 11:28:23 -0600
Message-ID: 
 <CAE0O7AhXpDFA90HyvRBLrbxova1TdVzB8LDV9WE+JmNC_1Zm7w@mail.gmail.com>
From: Rob Yamry <ryamry@kimberly.k12.wi.us>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary=047d7b5db592bb6c4904ef8cefeb
Subject: [users@httpd] Cannot authentication locally when LDAP is unavailable

--047d7b5db592bb6c4904ef8cefeb
Content-Type: text/plain; charset=ISO-8859-1

Hello-
  Im having a problem where local authentication will not work when when
the configured LDAP server is unavailble.  When the ldap server is online I
can authenticate fine against ldap and local file.  However, when the ldap
server is offline, I cannot authenticate with the user1 account.

Id appreciate any help you could provide.  Ive searched a lot on this and
found many examples, all very similar to my config below, but I still
cannot failback authentication to local file when ldap is unavailable.  Im
running Apache/2.2.10

AuthName "Server Access"
AuthType Basic
# Check ldap auth first, then file auth
AuthBasicProvider file ldap
AuthUserFile /etc/apache2/htpasswd
AuthzLDAPAuthoritative off
AuthLDAPURL ldap://
ldap.domain.com:389/OU=Users,DC=domain,DC=com?sAMAccountName
AuthLDAPBindDN "domain\ldap_user"
AuthLDAPBindPassword password
AuthLDAPGroupAttributeIsDN off

Require user user1
Require ldap-attribute memberOf=CN=groupName,DC=domain,DC=com

--047d7b5db592bb6c4904ef8cefeb
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hello-</div><div>=A0 Im having a problem where local =
authentication will not work when when the configured LDAP server is unavai=
lble. =A0When the ldap server is online I can authenticate fine against lda=
p and local file. =A0However, when the ldap server is offline, I cannot aut=
henticate with the user1 account.</div>
<div><br></div><div>Id appreciate any help you could provide. =A0Ive search=
ed a lot on this and found many examples, all very similar to my config bel=
ow, but I still cannot failback authentication to local file when ldap is u=
navailable. =A0Im running Apache/2.2.10</div>
<div><br></div><div><div>AuthName &quot;Server Access&quot;</div><div>AuthT=
ype Basic</div><div># Check ldap auth first, then file auth</div><div>AuthB=
asicProvider file ldap</div><div>AuthUserFile /etc/apache2/htpasswd</div>
<div>AuthzLDAPAuthoritative off<br></div><div>AuthLDAPURL ldap://<a href=3D=
"http://ldap.domain.com:389/OU=3DUsers,DC=3Ddomain,DC=3Dcom?sAMAccountName"=
>ldap.domain.com:389/OU=3DUsers,DC=3Ddomain,DC=3Dcom?sAMAccountName</a><br>=
</div><div>
AuthLDAPBindDN &quot;domain\ldap_user&quot;</div><div>AuthLDAPBindPassword =
password</div><div>AuthLDAPGroupAttributeIsDN off</div><div><br></div><div>=
Require user user1</div><div>Require ldap-attribute memberOf=3DCN=3DgroupNa=
me,DC=3Ddomain,DC=3Dcom</div>
</div><div><br></div>
</div>

--047d7b5db592bb6c4904ef8cefeb--