[Auth_ldap] Random "Authorization Required"-error although valid entry exists

[Martin Sigbjörn]

> You're going to have to turn up debugging on both the apache side and on
> the ldap server side, then try to match up the apache debug log entries
> where it fails with the server-side debug log entries. Then, we can
> figure out if the LDAP server is getting the request and not sending the
> correct result, or if the LDAP client (i.e., auth_ldap) is somehow
> mis-interpreting the results from the server.

Ok, I set debugging in Apache (httpd.conf) to "LogLevel debug" and I started
the LDAP-server (slapd) with "slapd -d 256", which logs
connections/operations/results.
I discoverd a pattern but I don't know if that's the error. When Apache
reports "Authorization Required" I noticed that auth_ldap contacts the
LDAP-server and makes a search, but auth_ldap doesn't bind to the
ldap-server. At least it seems so (you can see in the attached logs). Maybe
auth_ldap then tries to do an anonymous bind. I tried that myself at the
command line using "ldapsearch" and the LDAP-server returned nothing (this
is correct because I've turned of anonymous bind in slapd.conf). Well, I've
attached a file containing logs from both Apache and slapd so you can take a
look. I hope you can figure out what's causing the problem.

Kind regards
/Martin Sigbjörn, Arrowhead