[Auth_ldap] AD upgrade breaks auth_ldap?

Rohit Kumar Mehta rohitm at engr.uconn.edu
Wed Aug 17 07:08:55 PDT 2005


Hi guys, we have two separate Apache 1.3 servers using Active Directory 
for authentication (via auth_ldap 1.6.0-3)
They have been working for months problem-free.

Since patching our DCs last night they have both broken.  I have not 
looked into this thoroughly yet.  Wondering
if anyone has seen anything similar?

Our apache2 server using modauthldap (9/7/2003) works fine.

Here is a snippet of our error log of a failing server:

Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(480): [client 10.0.0.3] 
{18250} Entering ldap_authenticate_basic_user
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(498): [client 10.0.0.3] 
{18250} authenticate: using URL 
ldap://ourDC.com/dc=ourDC,dc=com?samAccountName?sub?(objectClass=user)
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(503): [client 10.0.0.3] 
{18250} authenticate: result is 401
[Wed Aug 17 09:50:11 2005] [debug] buff.c(314): read returned 285 
rwstate=1 state=3 rstate=240 cren=0 aren=0 accept=2
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(480): [client 10.0.0.3] 
{18250} Entering ldap_authenticate_basic_user
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(498): [client 10.0.0.3] 
{18250} authenticate: using URL 
ldap://ourDC.com/dc=ourDC,dc=com?samAccountName?sub?(objectClass=user)
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(551): [client 10.0.0.3] 
{18250} entry for `someguy' is not in the cache
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(145): [client 10.0.0.3] 
{18250} Entering auth_ldap_connect_to_server
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(577): [client 10.0.0.3] 
{18250} Peforming a search (scope=2) with filter (&(objectClass=user)(s
amAccountName=somguy))
[Wed Aug 17 09:50:11 2005] [debug] auth_ldap.c(581): [client 10.0.0.3] 
{18250} LDAP OP: search
[Wed Aug 17 09:50:11 2005] [error] [client 10.0.0.3] LDAP search for 
(&(objectClass=user)(samAccountName=someguy)) failed: LDAP error: Operat
ions error; URI /~ipaudit





More information about the Auth_ldap mailing list