LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 09-08-2008, 01:53 AM   #1
kenneho
Member
 
Registered: May 2003
Location: Oslo, Norway
Distribution: Ubuntu, Red Hat Enterprise Linux
Posts: 655

Rep: Reputation: 40
Using Active Directory to authenticate Apache users


Hi.


I've heard that using Active Directory to authenticate Apache users may be a bit of a struggle. Does anyone have experience with this, and can point me to documentation on how to do this properly?

Regards,
kenneho
 
Old 09-08-2008, 01:57 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,386

Rep: Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963Reputation: 1963
many many quick hits on google... http://www.yolinux.com/TUTORIALS/Lin...tion.html#LDAP there's nothing particuarly interesting about AD compared to other LDAP interfaces, just that you're using sAMAccountName instead of a uid. this is only one way of doing it, and about the quickest and simplest. if you have specific problems post your configs and we'll go from there.

Last edited by acid_kewpie; 09-08-2008 at 02:01 AM.
 
Old 09-08-2008, 02:13 AM   #3
kenneho
Member
 
Registered: May 2003
Location: Oslo, Norway
Distribution: Ubuntu, Red Hat Enterprise Linux
Posts: 655

Original Poster
Rep: Reputation: 40
Thanks I'll check it out.
 
Old 09-08-2008, 07:28 AM   #4
kenneho
Member
 
Registered: May 2003
Location: Oslo, Norway
Distribution: Ubuntu, Red Hat Enterprise Linux
Posts: 655

Original Poster
Rep: Reputation: 40
Authentication error

I've tried to set up apache to authenticate against AD, but are getting this error:

Code:
[Mon Sep 08 14:16:03 2008] [error] [client xxx.xxx.xxx.xxx] access to /folder failed, reason: verification of user id 'kenneho' not configured, referer: http://host.example.com/

This is from my httpd.conf:

Code:
AuthType Basic 
AuthName "Welcome!" 
AuthLDAPURL ldap://111.222.333.444:389/dc=example,dc=com?sAMAccountName 
AuthLDAPBindDN CN=user,OU=something,DC=example,DC=com 
AuthLDAPBindPassword secret 
Require vaild-user
General ldapsearch using the bind DN and password seems to work fine:

Code:
ldapsearch -x -D "CN=user,OU=something,DC=example,DC=com" -w secret
Any ideas on how to further debug this?
 
Old 09-10-2008, 06:24 AM   #5
kenneho
Member
 
Registered: May 2003
Location: Oslo, Norway
Distribution: Ubuntu, Red Hat Enterprise Linux
Posts: 655

Original Poster
Rep: Reputation: 40
Solved

Seems we may have suffered from a bug regarding using references in MS 2003 AD. What we did to get things going was to query the AD-server on port 3268, and make sure AuthzLDAPAuthoritative was set to "Off".
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
methods for using Active Directory to authenticate Unix users! iga3725 Linux - General 1 05-27-2006 07:41 PM
methods for using Active Directory to authenticate Unix users! iga3725 Linux - Enterprise 1 05-27-2006 06:34 AM
methods for using Active Directory to authenticate Unix users! iga3725 Linux - Software 1 05-26-2006 10:07 AM
apache authenticate to Active Directory zuessh Linux - Software 1 07-08-2005 03:29 PM


All times are GMT -5. The time now is 09:19 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration