[Auth_ldap] [ldap_search_ext_s() for user failed][Referral]

[Jet Wilda]

Hi,

	I figured out my issue.  This link
http://garyhoward.com/Reference/Articles/Apache+AD/ helped.  My
AuthLDAPURL was wrong.  Got that fixed up and everything worked great.


Jet

>Jet Wilda wrote
> 
> 
> Hi,
> 
> 	I'm having trouble authenticating to win 2000 active 
> directory. Here is my apache:
> 
> # /usr/sbin/httpd -l
> Compiled in modules:
>   core.c
>   prefork.c
>   http_core.c
>   mod_so.c
> 
> # /usr/sbin/httpd -v
> Server version: Apache/2.0.52
> Server built:   Feb 28 2005 07:22:28
> 
> Here is whats in my conf file
> 
> <Location /svn>
>         DAV svn
>         SVNParentPath /data/svn
>         SVNAutoversioning on
>         <LimitExcept GET PROPFIND OPTIONS POST LOCK UNLOCK 
> PROPPATCH COPY MOVE MKCOL>
>         AuthLDAPEnabled on
>         AuthLDAPAuthoritative on
>         AuthType Basic
>         AuthName "My Subversion repository"
>         AuthLDAPURL 
> "ldap://192.168.12.11/cn=Users,dc=km,dc=kobieloyalty,dc=com?sA
> MAccountNa
> me?sub?(objectClass=user)"
>         AuthLDAPBindDN "cn=apache,cn=Users,dc=km,dc=kobieloyalty"
>         AuthLDAPBindPassword "passwd"
>         Require valid-user
>         </LimitExcept>
> </Location>
> 
> Here is what I get in my error log:
> 
> [Wed Aug 10 15:56:05 2005] [notice] LDAP: Built with OpenLDAP 
> LDAP SDK [Wed Aug 10 15:56:05 2005] [notice] LDAP: SSL 
> support unavailable [Wed Aug 10 15:56:06 2005] [debug] 
> util_ldap.c(1432): INIT global mutex /tmp/filefQgisZ in child 7776 
> [Wed Aug 10 15:56:06 2005] [debug] util_ldap.c(1432): INIT 
> global mutex /tmp/filefQgisZ in child 7777 
> [Wed Aug 10 15:56:06 2005] [notice] Apache/2.0.52 (Red Hat) configured
> -- resuming normal operations
> [Wed Aug 10 15:56:06 2005] [info] Server built: Feb 28 2005 
> 07:22:28 [Wed Aug 10 15:56:06 2005] [debug] prefork.c(955): 
> AcceptMutex: sysvsem
> (default: sysvsem)
> [Wed Aug 10 15:56:06 2005] [debug] util_ldap.c(1432): INIT 
> global mutex /tmp/filefQgisZ in child 7778 
> [Wed Aug 10 15:56:34 2005] [debug] mod_auth_ldap.c(308): 
> [client 192.168.12.39] [7775] auth_ldap authenticate: using 
> URL 
> ldap://192.168.12.11/cn=Users,dc=km,dc=kobieloyalty,dc=com?sAM
> AccountNam
> e?sub?(objectClass=user)
> [Wed Aug 10 15:56:34 2005] [warn] [client 192.168.12.39] 
> [7775] auth_ldap authenticate: user kmadmin authentication 
> failed; URI /svn/KobieProjects [ldap_search_ext_s() for user 
> failed][Referral] [Wed Aug 10 15:56:41 2005] [debug] 
> mod_auth_ldap.c(308): [client 192.168.12.39] [7776] auth_ldap 
> authenticate: using URL 
> ldap://192.168.12.11/cn=Users,dc=km,dc=kobieloyalty,dc=com?sAM
> AccountNam
> e?sub?(objectClass=user)
> [Wed Aug 10 15:56:41 2005] [warn] [client 192.168.12.39] 
> [7776] auth_ldap authenticate: user kmadmin authentication 
> failed; URI /svn/KobieProjects [ldap_search_ext_s() for user 
> failed][Referral]
> 
> 
> This ldapsearch string on the command line works
> 
> ldapsearch -H ldap://192.168.12.11 -D 
> "cn=apache,cn=Users,dc=km,dc=kobieloyalty" -w 'passwd' -x -v 
> -b "dc=km,dc=kobieloyalty" -s sub "(&(objectClass=user))" 
> sAMAccountName
> 
> So I'm at a lose as to what is wrong.  It seems to bind.  
> When I try to connect I get a login box and I enter the same 
> username and password in and it just keeps popping up the 
> login box and just fills up my logs with the error:
> 
> [Wed Aug 10 15:56:41 2005] [debug] mod_auth_ldap.c(308): 
> [client 192.168.12.39] [7776] auth_ldap authenticate: using 
> URL 
> ldap://192.168.12.11/cn=Users,dc=km,dc=kobieloyalty,dc=com?sAM
> AccountNam
> e?sub?(objectClass=user)
> [Wed Aug 10 15:56:41 2005] [warn] [client 192.168.12.39] 
> [7776] auth_ldap authenticate: user kmadmin authentication 
> failed; URI /svn/KobieProjects [ldap_search_ext_s() for user 
> failed][Referral]
> 
> 
> 
> Thanks for any and all Help
> 
> 
> Jet
> _______________________________________________
> Auth_ldap mailing list
> Auth_ldap at rudedog.org 
> http://www.rudedog.org/mailman/listinfo/auth_l> dap
>