LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 11-30-2006, 05:06 AM   #1
chithu
LQ Newbie
 
Registered: Nov 2006
Posts: 6

Rep: Reputation: 0
LDAP auth with apache doesn't works in FC6


Hi,

I have installed openldap-2.3.19-4 and apache httpd-2.2.0-5.1.2 in my Fedora 5 server. The same thing i tried with Fedora 6 server but no improvement.

Note:
But its works fine in Fedora 3 server. (openldap-2.2.29-1.FC3
and httpd-2.0.52-3)

When i am trying to do a ldap authenticate before displaying webpage. It asks username & password but it doesn't get through even if its a valid username & password.

Since the same config using in Fedora 3 works and not in Fedora 5 or Fedora 6. I wondering why its not working with latest versions of openldap & httpd. Is that any configurations are changed ?

Help is appreciated. Thanks in advance.


For your reference,

The /var/log/httpd error says,
[Thu Nov 30 16:27:23 2006] [error] [client 192.168.10.5] access to /testauth failed, reason: verification of user id 'chithu' not configured


My LDAP part in /etc/httpd/conf/httpd.conf files is

<Location /testauth>
AuthType Basic
AuthName "LDAP Authentication"
AuthLDAPURL "ldap://127.0.0.1:389/ou=people,dc=example,dc=com?uid"
Require valid-user
</Location>
-----

And my ldap server has following entries.

dn: dc=example,dc=com
dc: example
o: Organization
objectClass: dcObject
objectClass: organization
description: My Organization
----
dn: ou=people,dc=example,dc=com
ou: people
description: All employess of the Oraganization
objectclass: organizationalunit
----
dn: uid=test,ou=people,dc=example,dc=com
uid: test
cn: test
sn: test
userPassword: secret
objectClass: inetOrgPerson

----
 
Old 11-30-2006, 09:43 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Make sure you've loaded the mod_auth_ldap module? Check for something like the following in your httpd.conf:
Code:
LoadModule mm_auth_ldap_module modules/mod_auth_ldap.so
 
Old 12-07-2006, 02:02 AM   #3
chithu
LQ Newbie
 
Registered: Nov 2006
Posts: 6

Original Poster
Rep: Reputation: 0
Arrow

Hi,

Thanks for the reply.


LoadModule mm_auth_ldap_module modules/mod_auth_ldap.so

This module is available for older versions say httpd-2.0.52-3 on Fedora 3. And its not available for Fedora 5 or higher.


And I hope for the latest versions say httpd-2.2.0-5.1.2 on Fedora5 has the following modules related to LDAP.

LoadModule ldap_module modules/mod_ldap.so
LoadModule authnz_ldap_module modules/mod_authnz_ldap.so


Any thoughts please let me know.

Thanks,
M.Chidambaram.
 
Old 12-07-2006, 03:49 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
According to mod_authnz_ldap documentation you need to add some more things in the ldap part of your configuration:
Code:
<Location /testauth>
AuthType Basic
AuthName "LDAP Authentication"
AuthBasicProvider ldap
AuthLDAPURL ldap://127.0.0.1:389/ou=people,dc=example,dc=com?uid
AuthzLDAPAuthoritative Off
Require valid-user
</Location>
Note also that you don't need the double quotes in your AuthLDAPURL

Regards
 
Old 12-18-2006, 05:19 AM   #5
chithu
LQ Newbie
 
Registered: Nov 2006
Posts: 6

Original Poster
Rep: Reputation: 0
LDAP auth with apache doesn't works in FC6 Reply to Thread

<B>Thanks Bathory</B>

Problem is solved and its works perfectly.
 
Old 03-08-2007, 05:34 AM   #6
chilon
LQ Newbie
 
Registered: Feb 2007
Posts: 2

Rep: Reputation: 0
problem group ldap + httpd

I used LDAP web authentification and it work with me and this my code:

<Location /ebiz>
DAV svn
SVNPath /var/opt/ebiz
AuthType Basic
Allow from all
AuthBasicProvider ldap
Options Indexes FollowSymLinks
AuthName "EBIZ Referentiel Subversion"
AuthLDAPUrl "ldap://192.168.0.1:389/ou=Users,dc=businessdecision,dc=com?uid"
AuthzLDAPAuthoritative Off
require ldap-user aoueslati mmedini rbensmida sbelhadj ychelly
</Location>

Now, I want to use auhtentification LDAP Group
In ower case group (ou=Groups)is EBIZ(cn=EBIZ)contain mmedini rbensmida sbelhadj ychelly (memberUid)

Please what can I Do??

Merci.
 
Old 04-17-2007, 03:45 AM   #7
chithu
LQ Newbie
 
Registered: Nov 2006
Posts: 6

Original Poster
Rep: Reputation: 0
Hi,

I hope this link will help u, http://httpd.apache.org/docs/2.2/mod....html#reqgroup


Chidambaram.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Ldap Radius Auth... tmolise Linux - General 1 11-02-2006 04:12 AM
Enabling LDAP auth for Apache 2.0.55 HSukirman Linux - Software 3 06-07-2006 03:56 AM
Problem with ldap auth Drunkalot Fedora 3 01-29-2006 08:29 PM
Auth via LDAP on eDirectory jtweaker Linux - Networking 1 12-28-2004 08:18 AM
Ldap + smb auth PcHammer Linux - Software 0 02-17-2003 03:19 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 05:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration