[Auth_ldap] RE: Windows 2003 Active directory ldap server and Redhat linux Apache

[Richard Stovall]

> -----Original Message-----
> 
> Date: Wed, 17 Mar 2004 15:41:04 -0800
> From: "Kogami, Bruce" <bkogami at randmcnally.com>
> Subject: [Auth_ldap] Windows 2003 Active directory ldap server and
> 	Redhat	linux Apache
> To: auth_ldap at rudedog.org
> 	
> 
> Hi all,
> 
>  
> 
> Has anyone had any success running Apache and authenticating 
> with a Windows 2003 Active directory server? If you have, let 
> me know. I've tried everything with no success and was 
> wondering if it's even possible.
> 
>  
> 
> Thanks,
> 
> Bruce

It sure is, and it works quite well.  (At least in my lab.)  Here are
the specifics of my setup:

redhat 9
apache 1.3.29
auth_ldap 1.6
openldap-2.0.27-8
openldap-devel-2.0.27-8
openldap-clients-2.0.27-8


There's a catch, however, if you want to use tls.  A bug exists in
openldap-2.0.27-8 as shipped with Redhat 9 which causes apache to seg
fault if you authenticate with starttls = on.  You can find the patch
and fix it yourself, or you can get updated rpms from here:
http://nabber00.hopto.org/projects/openldap/

Once I installed the updated openldap rpms it started working
beautifully.  As described in the auth_ldap documentation you need to
have an account to do the initial bind with the ldap server (a 2003
Server DC).  I use a dummy account that is severly limited in what it
can do or has access to.

I hope this helps.  Let me know if you have config problems.

Richard Stovall