Need help find out what ldap server a suse apache install is pointing to....

Thaidog · 03-08-2011, 09:38 AM

I've got an old SuSE box that is a SVN server using apache for ldap authentication. The suers are not able to log on for some reason so I am trying to find out where this box is pointed to authenticate... I do not know SuSE or ldap well enough to know where to look to find out this info... any ideas?

AlucardZero · 03-08-2011, 09:46 AM

Open up httpd.conf (or apache2.conf) and search for LDAP. This Apache config file is probably in /etc/httpd/ or /etc/apache2.

Thaidog · 03-08-2011, 10:15 AM

Don't see anything in it:

server:/usr/local/apache2/conf # cat httpd.conf | grep LDAP
server:/usr/local/apache2/conf # cat httpd.conf | grep ldap
server:/usr/local/apache2/conf #

jcalzare · 03-08-2011, 10:29 AM

Do you have a conf.d directory containing other config files? Try this: fgrep -RiH ldap /usr/local/apache2/conf.d/*

Thaidog · 03-08-2011, 10:32 AM

server:/usr/local/apache2/conf # fgrep -RiH ldap /usr/local/apache2/conf.d/*
grep: /usr/local/apache2/conf.d/*: No such file or directory
server:/usr/local/apache2/conf # cd ..
server:/usr/local/apache2 # ls
. .. bin build cgi-bin conf error htdocs icons include lib logs man manual modules tmp

jcalzare · 03-08-2011, 10:42 AM

Try it for the conf directory then.

You could also install iptraf or another network monitoring tool and see what IP address ldap requests are being sent to. Or, you could check:

netstat -anp | grep :636
netstat -anp | grep :389

To search for any established connections to the ldap machine.

Thaidog · 03-08-2011, 01:13 PM

Quote:

Originally Posted by jcalzare

Try it for the conf directory then.

You could also install iptraf or another network monitoring tool and see what IP address ldap requests are being sent to. Or, you could check:

netstat -anp | grep :636
netstat -anp | grep :389

To search for any established connections to the ldap machine.

seerver:/usr/local/apache2 # netstat -anp | grep :636
server:/usr/local/apache2 # netstat -anp | grep :389

I beginning to wonder how this thing authenticates at all...?

jcalzare · 03-08-2011, 01:15 PM

I guess it's possible that the servers are configured to communicate via ldap on a non-standard port... is there anything useful in the netstat output without the grep?

Thaidog · 03-08-2011, 01:27 PM

Found this:

Code:

server:/usr/local/apache2 # lsof -p 7834
COMMAND  PID USER   FD   TYPE DEVICE      SIZE      NODE NAME
httpd   7834 root  cwd    DIR  104,2       648         2 /
httpd   7834 root  rtd    DIR  104,2       648         2 /
httpd   7834 root  txt    REG  104,7   2343495     81121 /usr/local/apache2/bin/httpd
httpd   7834 root  mem    REG  104,2    107122     39490 /lib/ld-2.3.3.so
httpd   7834 root  mem    REG  104,7     24180     84771 /usr/local/apache2/modules/mod_auth_pam.so
httpd   7834 root  mem    REG  104,7    221953     55104 /usr/lib/libssl.so.0.9.7
httpd   7834 root  mem    REG  104,7   1127183     38336 /usr/lib/libcrypto.so.0.9.7
httpd   7834 root  mem    REG  104,7    253668     79397 /usr/local/apache2/lib/libaprutil-0.so.0.9.6
httpd   7834 root  mem    REG  104,7    160096     19189 /usr/lib/libexpat.so.0.5.0
httpd   7834 root  mem    REG  104,7    438356     79360 /usr/local/apache2/lib/libapr-0.so.0.9.6
httpd   7834 root  mem    REG  104,2     36411     39504 /lib/tls/librt.so.1
httpd   7834 root  mem    REG  104,2    170563     39502 /lib/tls/libm.so.6
httpd   7834 root  mem    REG  104,2     43632       127 /lib/libcrypt.so.1
httpd   7834 root  mem    REG  104,2     88202       131 /lib/libnsl.so.1
httpd   7834 root  mem    REG  104,2     88315     39503 /lib/tls/libpthread.so.0
httpd   7834 root  mem    REG  104,2     13647     39493 /lib/libdl.so.2
httpd   7834 root  mem    REG  104,2   1345705     39501 /lib/tls/libc.so.6
httpd   7834 root  mem    REG  104,7     23477     84772 /usr/local/apache2/modules/mod_auth_sys_group.so
httpd   7834 root  mem    REG  104,2     33263      2894 /lib/libpam.so.0.77
httpd   7834 root  mem    REG  104,7    365077     81393 /usr/local/apache2/modules/mod_dav_svn.so
httpd   7834 root  mem    REG  104,7     26736     81394 /usr/local/apache2/modules/mod_authz_svn.so
httpd   7834 root  mem    REG  104,7    287617     81309 /usr/local/lib/libsvn_repos-1.so.0.0.0
httpd   7834 root  mem    REG  104,7     61227     81299 /usr/local/lib/libsvn_fs-1.so.0.0.0
httpd   7834 root  mem    REG  104,7     95639     81289 /usr/local/lib/libsvn_delta-1.so.0.0.0
httpd   7834 root  mem    REG  104,7    401806    122224 /usr/local/lib/libsvn_subr-1.so.0.0.0
httpd   7834 root  mem    REG  104,7    304610     81294 /usr/local/lib/libsvn_fs_fs-1.so.0.0.0
httpd   7834 root  mem    REG  104,7   3455400     70200 /usr/local/apache2/modules/libphp4.so
httpd   7834 root  mem    REG  104,7     57489     70559 /usr/lib/php/extensions/session.so
httpd   7834 root  mem    REG  104,2     74415       140 /lib/libresolv.so.2
httpd   7834 root  mem    REG  104,2     41737     39497 /lib/libnss_files.so.2
httpd   7834 root  mem    REG  104,7    208464     22481 /usr/lib/locale/en_US.utf8/LC_CTYPE
httpd   7834 root  mem    REG  104,7     21512     19896 /usr/lib/gconv/gconv-modules.cache
httpd   7834 root  mem    REG  104,7     17623     67140 /usr/lib/libmm.so.13.0.20
httpd   7834 root  mem    DEL    0,6             2424835 /SYSV00000000
httpd   7834 root  mem    REG  104,7     51874     70199 /usr/lib/php/extensions/mysql.so
httpd   7834 root  mem    REG  104,7    238532     84798 /usr/lib/libmysqlclient.so.12.0.0
httpd   7834 root  mem    REG  104,2     70516     34194 /lib/libz.so.1.2.1
httpd   7834 root  mem    REG  104,7   1556457     66556 /usr/lib/php/extensions/mbstring.so
httpd   7834 root  mem    REG  104,7     46306     66555 /usr/lib/php/extensions/ldap.so
httpd   7834 root  mem    CHR    1,5               18122 /dev/zero
httpd   7834 root  mem    REG  104,7    232415     48259 /usr/lib/libldap.so.199.3.24
httpd   7834 root  mem    REG  104,7     57827     46356 /usr/lib/liblber.so.199.3.24
httpd   7834 root  mem    REG  104,7     93455     48341 /usr/lib/libsasl2.so.2.0.18
httpd   7834 root    0r   CHR    1,3               10455 /dev/null
httpd   7834 root    1w   CHR    1,3               10455 /dev/null
httpd   7834 root    2w   REG  104,7       154    634223 /usr/local/apache2/logs/error_log
httpd   7834 root    3u  IPv6  15702                 TCP *:http (LISTEN)
httpd   7834 root    4u  IPv6  15703                 TCP *:arcp (LISTEN)
httpd   7834 root    5u  IPv6  15704                 TCP *:http-alt (LISTEN)
httpd   7834 root    6r  FIFO    0,7           502620641 pipe
httpd   7834 root    7w  FIFO    0,7           502620641 pipe
httpd   7834 root    8w   REG  104,7       154    634223 /usr/local/apache2/logs/error_log
httpd   7834 root    9w   REG  104,7         0    574653 /usr/local/apache2/logs/server-error-8080.log
httpd   7834 root   10w   REG  104,7    226863    626783 /usr/local/apache2/logs/server-error.log
httpd   7834 root   11w   REG  104,7         0     84753 /usr/local/apache2/logs/access_log
httpd   7834 root   12w   REG  104,7         0    600230 /usr/local/apache2/logs/server-access-8080_log
httpd   7834 root   13w   REG  104,7 163839506    675373 /usr/local/apache2/logs/server-access_log
httpd   7834 root   14u   REG  104,2         0     20528 /tmp/session_mm_apache2handler0.sem

Looks like ldap mods are loaded... now where is the config that would say where they point?

bathory · 03-08-2011, 01:43 PM

Hi,

Maybe the ldap related directives are in a .htaccess file

Regards